last executing test programs: 5m12.52027643s ago: executing program 3 (id=1375): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10004, 0x2, 0x4, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x80086601, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0xffffffffffffff0d, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000080)=0x4, 0x4) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000003168da202104273e88e20102030109021200010000100009042b020002fea100"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) 5m11.508380205s ago: executing program 3 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00), 0x0, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 5m11.305696839s ago: executing program 3 (id=1385): r0 = socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) (async, rerun: 64) r5 = getpgid(0x0) (rerun: 64) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) (async) sendmmsg$unix(r3, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r6, 0x400, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='mqueue\x00', 0x2000000, &(0x7f0000000540)='broadcast-link\x00') getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000003c0)={'mangle\x00', 0x0, [0x9f3f, 0x1, 0x8, 0x400, 0x3eb]}, &(0x7f0000000440)=0x54) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x4a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r8, @ANYRES16=r10, @ANYBLOB="01000000ff7ffedbdf91b2a5405beef1250379adad00f0beda4333c68220f4f130c9dbe6dad4d4729ba10400003e5800018044000400200001000a0000000000f2000000000000000009000000000000000100000000200002100a006c15000000bafffff9000d00010075244e660000000000000000"], 0x6c}}, 0x0) (async) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x150, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x39c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x6b646945}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f00000005c0)) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r8, @ANYRES64=r0], 0x0) 5m11.148474602s ago: executing program 3 (id=1386): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 64) r1 = socket(0x840000000002, 0x3, 0xff) syz_clone(0x22080200, &(0x7f0000000000)="24364545f961899a01e05dd92bce0e5aa6284f4641f392dfe1b1c524768fd2fb525cfce76c1de11090fde2c51f7a91144aebc2df6e26038d5cf105f9ad7daefafabb6df5852261049bd39e4aae47f8a649e911bbd87f5137ff7a4377d153a293bd2df8ea568f2195e9a3a167b1", 0x6d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000480)="1b7520d85eaca0c24b86052add92cef0dd22751763edada6468bc78af4cb7caac54b5e20a0647eed3764ea86e8b289366bd86c5bd7abf486101858049a8df7462b19bf1e11786c00cb272a5733b4d6f8a02b9eeb7b81082b6279002fcc50c6a5d681d89b0de54c8230debb3ea907e24cda98d76660d073e7706cb28c0327258bbc71e8d2d00fa26c8dfcbd7d328d982696f8a2873bb29d440f4965fec251c7b86a66bd4216aeb5247cb81a22c6da99c60dea23335f982caa09026afc51b5eab82419eadcaa74ccabdb3063d97922963d8879af512077c6fc22eac4252e29f2bdbc4a4862d188d291308adb27cbbc65c22ee8edf4c742372b73cefc1c68147db59a9ca905796bea325fee917bd18e30a4435ea03ce1401e204c7f82cc4b928be3f6df6d3e75095997eda1304b1cf089ad8acd086798292f71b739fd86e83a62025c605281d773ff7fd20991bd240a7a4c49fd72e0317b79dd6d30eeabce3d859d1a90ff6a5ca6e1b703a330b6fc62085d4d96c57297c26c268c354371eda83758db7e1d62bf176c7034cfb18119628cbe903e983642860a0f297a8ff5d0255237b8460169cd0b320baa425c1ad46c23030070c7195db4d9a9e795ed584d36ddd815278aca561ce06fea47b025e9b009e3d5d0aec02d3fa3d398fee4ce167dcae6877212f252d2ed2cff1097189252603702b6acd1fdd369306b5b59ea8271e4b4086fdb7fd4a8f4fd4fe95ece18bb717a9d07b98b150969cdf77f6823901b79f284b284a3ca3e312319f9fc30c7454df8d87c02cf4311dcf7e19be829f266da9a68634d599f97a373e9898da019a6685aedb2f07317c116a1e784377b2fe83296c169d5d18dd13dc564735bcb3d9d2e63c08fa76258094c2842cb2e2581790ccda9abb766d616b0a38b77bb2c2476dfa23047d9f50eb49d7c888cd44b0e10a9b7d8505daaaeae86d53753d2c3a9a61ef36257327cead6379484aa72296b9a11f984d90bd5ffa9370a88a3d4965f2f83b770ec8eea9ac90351db9cd4b34d0f3cc654bda37fcfcfac31cf557c165baea361de29f94da5f016fd76640e59695a0bca9ebff8c280b2f7e5e8867d1fc41b37f29f2ba23b180153fdffbae6af840373959487e46300e1b544fd5a59e1462658026b3304a51b903a530ede1f2a5ab9020a4321ded45716a30c82bdc3b3e5572808835557149cd6c31742e6a5f5b5975b02f697b86adf01f3768f79000809608c76f562a6b711abf28944e63fa65dc88024432dce1d6cb1a03ac973164b150b26979bb1134f8f068867dd89fea46686793b0383c9b0680e3370851a4af855895df2b54b318e25288cf30525ffa1002f44388362c18e23cc8e3a38b5606f8c73f85f904a4ca3976bd0c43fcb14c23f97875e358e4f4d01063a38208d1eee15d9cecc04edf4e505dadfd5ac5e4a4c3caee55ca8df93c759d7fbc040d37fe2c58d5d0c3b66d955775a5cdf7bd5deca56a1f44c1929f6f957f8713d45afdfcf5f8de64866434711a3a4b54d43e1296f5f110cdf747d25567708bd3964a5f6b17dbbf105c0f0f3dba8c0460e67dba84525ca0c30785ed52cbd90d41300a0b4beb02612f80aaf22cd7348ceeaf6f79d9023835211297a0570f542cf0c83401707ebabc158a045fd112e48a982d5b29d08b1f0a68efae80bb2e7337a72f06a29184acee166eef4f6e0727faf1af4bc957ae088201f5c8b1cbe6063edf06760f13d3e2e9205c82bc41a986ff5d00566dae2e89941a10b47b023ba470e5b3bfaf739381e39b8a60f835d019e83c3c4f4d82dfebf91a61d6197a3948baf16297e21f3f35aa148b3db5b7e9e906c806bb2fdea7dd787e2e5473bd8ffaf64e482506c3efad9596439a81390c35b4a4cda19632ddf9b533a0609c217e04fd584a2bff7841e0373ea096ecbcb468e05339e72ff600c888590c4b9b2738d9fa62f95e5fa6c615cbcab5c1a99ed2d108ed3cde64f39c123bca780ee1323af288ccc454fd9e3b77c85bd442d1f21012f96ddeaa26a72c1eeb6057a7f1a5428d1552b3f9966825fd9f929e452fda889ab4abc58965fdfb0a6d1d7fda65ed6e265f53e94f5c49fda6dff168102422d6a52ed32d7a6074f05be53d533964830cb38a9bf441cb1f0ed0f30dc531e97402942afebe53a9f5ebfb2593d3b6fc0eb6b350e09dd0eed2eb75cb146f14ef0bdcb217fb53c281f2223379324aa756a7e4a2ccba436cc22895e7537172d31ebd343cf73a3b09712abd581388ff288f51597fd936bdaf8087807ad685828faefc8f1c02581e3ec0b3332035f1cca9c3524a2424f45071d55c5ed6994c1f79e0f2aceea7f220474b0510e55a9d6d45214f1e69f4dd483adb6afc6a76c22eac8ffb6c76475cfad6fbf39f5c35cfa3b6a849729be69fb82e154e82db3f377f56d5ac2156ee0bd06e8df8b4d6c0a7188b97eba385dbe4b5d0c551005c29fdc872074d21eb150ec363185e8232c7e289087723770395e7072efaef2fbc717f31b30a8777975ba7f71e12462e1939d2ac55ed17f73a3b5a0560e52ea2da01848323250326a1a5003c57388cdb6d77b0ed10e0d5020b912e6162e655d51b53d5b4f6f8f02ee3ffdd10a10ae0a229f16435fde55a51b522bae9ea8d14bc90f3adf9f75e5f7b31bc05760b2250738985485babf9d8454a1d64fff05e0fe8ed34c13f7261ad4b50fc2bbf80407d29d744c7a0832760ed932ce027270b3ab2b68bae37ee7e3d74c30ec27eee6da954a19e2722cace0e0069ce9188ea5f3dd3c68ae65680736cb262ff2076d81416071b343b831a8e1e862bb9d76a3015440e80917668c21a6accac7308b32ac461734c16a1fca9a4423fbab7d963c10153c64a8eac356b0a8746707164913dd626fe1b2cc91723584d049cfa0fa19d764843cdabc827cc2065a2abe600d37b6ed0290ff7816ef910832976059e4f88a12633bb5edfc10133b77a30debe98d1d7d6b1ca48a70f298a05b3b98fe41edbc019b19527c6962f61e7ee8ca3e10e93e0690fd234d764e5f61512cc2249e664de1dc63e9df45d4aa7c69a5d35613771f28033621f8f68862a5650080b3f8871a8e6647d48c7aacf306badd4dd67e99841c882d63f8ac6b74fd7bd4df9bc620f65fe143b3720a6c1c74d2a02c1ecd049ad926e19b8579029e2cd90d7575fa25c3462fca06743a5640d2afd3e2dda2ea5452639692e0ebb9a0128c4b189bb338e95b0cbfa1e454e8ca510b88707a2b05fb490a00c1a2262eda47d132d002992a67c58f22d529c2ffcdf89a3e2a8ca7e2f863b2f0464b443bfb7d3fb7e80abd1a8cc6f3c52fdb0037636327e4e84d90157e73358fbade7e83834babb1027e5ed93c1079333398a6a09a1019d0f5187023121fe22fb77d42c8337592229d6a941f3b283431166c80a89f91cc6c7dc6ea12ef1b98b4def7b053e2fb9d22b7ba6c41dd7d79b8747d4866186493a5fd52be093625b0055e18eb580199210c09fb75276acfe69867429722516bb1969537fb7946fd977a97392cca0aa0c873777b1ed3e49967fa2daf7c9f1c72e1e8cf316dfe2d95e3a417807d6dcd4eace2a1e450139dff7dcb50755fd39d775fbd37408999137fa626a1131100c9ab57a8728909d0f9d98573af260b2d64a56e0125d8701b6cc83743658d5a6ae0b65b55dca030a837394bbc07add766e2a74807e7743c6a60a3fbb52f4fa69b7c875ed2617e89a02bbad8de797d342e2cf7b2b3c74b913b3babf12b00c50bdc256a59e971f0314888965bbdec39fa05cf8d9f5183aaa14b0d3eb934a92d5b11b1d2292dc562be752452564ea1db08c48f599eab0ea14889bf499a1e43e46fe006739f2ca43f3f7a0bd23e0382c87ae1768081eb4b19e5b32efbcd09e6dd91f683a29874ba349e495a23608159dd0dd64773459cca8bf33dfce8d089f22438de448172629bc8b8888c93ddb830912d7173882cf9b8207ed42f262ce1c3fde1d3d0184c3e59fd607ff9f5c25998ac802d759b4c83c7408da4aa1fbb21f82828a9593db2e4761ffd33619b923db8a0e49a3c90893d337f8b84fb9ad0dd9cf36778796ff360a29bac26c66c639c99833871ec8710cf4d8d8385ea35bb99819fac0e76fe2a83b56175f901cbcdc654c2c4d9d4bfa9847518d22aab3a87a2083175f5820f44875b41c42e120004e810aa64bf75d8b6117a56783de85ae2102c205f8b103b0aa1296c7a8499387dceb7e98409f12044954414635199ed01f681c491ad5709a31f56df3820dc622ce37666863088500f163aa4468d64f2d73e780a31f0d2e496fc5736ccd0bb76a044063a8a5043d72770b45ad1efad3d983cd01ce92f0a949535f52e47e8a415bf93245a1f323f81aee2755476a77c90705992c4778ace3e0fc4ffe514723e1119e9d075c7451c3b268215e31e2ac9453faabe350db2e9e9722b218392298378652153fbc604efd82d2ba02b35c0a56d9305b0ab84011d44308258575e7c5e6fa96bc08ccd10b4e4ff4f5b267ce2c1380e3354af2ca59030158624a5c00963f7f68f50e097589dca162cfb98ac24d20db53338b645e046d4ab188f04f6a3f7c1395c8e604e8b83c2eed2ecbaa8b6308b647d93c2c5aa744a09b585765debe8f5abed307bc9603af65a26c9f82b455e9597d610d1773803b17dd578f91a6be0ba40791a81cfc04a7190a49e9fc08c1a5594e428751b91c4e304cbaff4d5dcc1ec401b044afd60af8c80e04edae276e4711fa571b550a3d5d8f56916139ed0cadd11c936a09bbefe13dad94ff223105a0e9a0c0d08540bc68f9dc14ace6baabda7fe703beca7813a16e22b4c9f58c14faf59281e34cf971d3c17862801ab2eb567c62bb231d8f99d69c8f7c3e6fb089c1a91a293e836264e66c8756e595ade7d5476c6d4384a6935196d4905b029bca333d59382b75811c8912bb8c8a8be729135aa4fb77028316856a4f8a51389e1d9b35bbafc3a6fc489ad46a43462b4a981fd52b93f589b9a6a1ecf7fcd58a009256f97b41fa6714c6f7f7eb6688e263d46627ea7807590ed11b9c2f82bf03602c6c3cb6c99790cdffc5512b91118245ac497234bcead7f0cb1087849e013456ecac2e2c1e095f8556952abd6c087fbbed91154950cf8e6d8f3e4ee300d5da102c3a11b8ad467906da3941032101bc3de86fb52a146985998e3eeff521c1cbd19e856e3ce8c251bb116cf4bd8599388fcd70f437e833e660e19cb1e8ddb9fa828bf25c159f029bba738ac2dc7ddd758391ab60361175b2d526274e9dd598c842424bcfe34fce1ea3452a7458fcc97d9ad340955288e49bc48eaf5bccce4fe6964e0243a5afa3c72457699d9fd4f0490e850821e1b47c94a23a989fca1cbb04475e29031a6686cfd2bca7fa5f4248e6104001cffe794b7ff0e1785ac7a4f14b3f84afc96b65dc656d7c1bcd252fc22932ec4ff1f59cde70490a2ea27fe74b9cf54e52915b70e9358f457babefec03dfe2e6475b0133daaf6324bc47974ceebcd595470e865678431e98a71b9662928c982bd031a350ba428dadf3339aed2d0a8de341adf7b1662291d7be8b9af47f1f87e052972e8198a85ca3d96b09ab33b0a6d6ef6b4b533d4e13ce60f3535a079707305d0eff7f98ce8baba13867cb900e7b348b5c2116a6c67f4e1003633acc53742cb222d3a21a363244a35d2912f2559285c8e32735d5ee1d984017be4cd902c1ecba650ec8cd3360fae3e919ce34b0c2c02e224b2037df0998a71fe6bfb258ec1c9585705dfb3d5334538c8aaa44e4a0538d6af829fedc8") (async, rerun: 64) shutdown(r1, 0x1) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}) 5m11.039138889s ago: executing program 3 (id=1387): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x700, 0x34343452, 0x780, 0x86e, 0x1, @stepwise={{0x8001, 0x6}, {0x3, 0x4}, {0x7ff, 0x84}}}) write$vga_arbiter(r1, &(0x7f0000000040)=@unlock_all, 0xb) 5m10.55227913s ago: executing program 3 (id=1390): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x2e458, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}], [{@uid_lt={'uid<', r2}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '$/'}}, {@subj_user={'subj_user', 0x3d, '..\'-'}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd744efbdbdf25010000000000000008410000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000c786f914c83b757eb61fbc053606e4b732d5d8396610e2b924090f51fedc65040b5d135df38822e01dcbb6cad6d5d42b15b904f00ff0eed72823b36328e6a16151b93d042c11dc27255455fd14cad219ff5b7dab7d6ab6b70a9c449449126724483aba504aa78ae3"], 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) 5m10.377431693s ago: executing program 32 (id=1390): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x2e458, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}], [{@uid_lt={'uid<', r2}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '$/'}}, {@subj_user={'subj_user', 0x3d, '..\'-'}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd744efbdbdf25010000000000000008410000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000c786f914c83b757eb61fbc053606e4b732d5d8396610e2b924090f51fedc65040b5d135df38822e01dcbb6cad6d5d42b15b904f00ff0eed72823b36328e6a16151b93d042c11dc27255455fd14cad219ff5b7dab7d6ab6b70a9c449449126724483aba504aa78ae3"], 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) 4m10.698645765s ago: executing program 2 (id=1725): syz_io_uring_setup(0x40000f00, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r1, 0x401, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x10) 4m10.65055991s ago: executing program 2 (id=1726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4004801) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m10.551912544s ago: executing program 2 (id=1727): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="0c268a927ff6", 0x6, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000001f40)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0xd6b, 0x2, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x67, 0x0, 0x80, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xfffffffffffffc33, 0xcb, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}, @lsrr={0x83, 0x0, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x0, 0x73, 0x3, 0x6, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x4d69}]}, @lsrr={0x83, 0x0, 0x54, [@broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @local]}]}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4000844, &(0x7f0000000080)={0x11, 0x5, r6, 0x1, 0x5, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a80)=0x14) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="abd60f41854c56c2c3a0bde30c872a61eece9bf16847a2314d0fa2ee2212df7dc27078c6dbafb2dcb7f043d4ae44ac542279ed2ddbd9cc0ed4b79b69f7ef0d5174294f72d17d6c974daa3b08d6b5b4514c932cd3920d5a2c0d05e5af36ac26e25bb039dc18e16d459825dc1c025b1e99a58f0c465749fe34c3bdb7e3b0ceab0a459646c6c9914e2ee5c63b9faaa3b78c9130f81ebaf24eb7bba8a7e9951697026de9beb5144935be302435e36a21a3c35d98b88136f03a424bb9b8380d8ac8a75ae05060fe52da094c9a", 0xca}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x7, 0x3, "96"}, @generic={0x88, 0x9, "ca9a7b18126b71"}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x48, [@empty, @loopback, @local, @broadcast, @local]}]}}}], 0x70}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="2338e7aa47b9d76c275096206c59ec8fa1d6d8000cee5374c2997b53920fb904f25bc1c3c09372a0e9f3d0a07ea43a4c3749deb40f189fc8c0be1e6614c2d39eba45c5c8e0d555782dda4de803cd351bcc6c1f38f12e6ba1e8b95f5efe92cc71b72c4f96806172bfde5259a0070ea57eec56364b42c07e55f46835c0f155795a502b6d562923d63b42f6a6c0fa7099cb17d2aa4220f2b4682f35eb68d83ae1ef67b9cf4c8a5e20c706d3b30937bca77d5c985161ff0428bba1b9fc00668e8ccf56d9c83eeb82df08b34972d61efdec1ef613380769076a16f341e6e8f558e57814c2a4d80d1ea9d1192cccea5696d2190d59561f0ff7bbbe", 0xf8}, {&(0x7f0000000400)="371d486317c3a88104b60278b7e7bdc7f84452da5e11c165743bf1d2ffb3af8fa647e65bd8a211c1a2ace2fe94fa0eef", 0x30}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @empty}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="32965dac4a06fbb9301c938bf4db84b7287d7ce57db587", 0x17}, {&(0x7f0000000580)="31c183194d9f75809a0b715cddbb573e81f9226ac5e0649113732f54cee9c3ddd0eaeebb318bc36f3a777d8b9c843a613fa383b422d7b6242b81dce0624a57ca14461bf0359021014a5ff26961286df7732e3c369b1b40bb701fc614715b13105fb96365b06fba28d06efe4f68b6c9121f92c5d50281e9a4c80731", 0x7b}, {&(0x7f0000000600)="e39d9a2e", 0x4}], 0x3, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@cipso={0x86, 0x35, 0x3, [{0x1, 0xb, "59141d0d2dabba706d"}, {0x1, 0xd, "a1a8442fa6a57ec8fd28e0"}, {0x1, 0x2}, {0x6, 0x7, "bc855f008f"}, {0x2, 0xe, "adbf2f0830a03456b4773922"}]}, @noop, @cipso={0x86, 0x43, 0x3, [{0x5, 0xa, "198c3bea3c2cb6ec"}, {0x6, 0x7, "5ef7e173f8"}, {0x2, 0xc, "6fe3f3582234902081ab"}, {0x2, 0x8, "be4f7a3590db"}, {0x6, 0x6, "49be7114"}, {0x4, 0xc, "57e6647e25bca2cef7d6"}, {0x0, 0x6, "00aef42a"}]}]}}}], 0xc0}}, {{&(0x7f0000000740)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000780)="74f343999c53c180c6199916b4c95cbacaf43c3e100298adead248bf7d5b9169e3d3eea0dfb8010e9a7a2f1ad6df8117bdfaf7311569ccac", 0x38}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000840)="058582aabd4d454af31e87308e1344315600be88660c28eaf858260eea46a8e529a5c0789963916ff91182ec1b378e69685d958a4e672cd1ebd303bf39b52be22f63babea8ce2479b97210c874c7edc50dc2ab5f2a8a8759ef42d303ebcc3d5f839fd486659e3d30b31158e7b0630ccb8a61d1cc88", 0x75}, {&(0x7f00000008c0)="2b78ee58998d8a85064d95cb213d6246376dc012ea656266640ea8ab8e1a7f03f8434244c0e5aec960e08f53084cc1e8364d3a1eb4758b4bb30c91e4488319fb93a09619942c7789381fc0706ced91fd5457d5ad1083154fafdd77e79fb817ec56b8ac79887f24496e0ca9fe21df458cbb8a13cc6094e170e5d1fa2f1cfa714c4d1cf87c745c360d0f33db3664ca4ed373ed798f6810c41cd01895e16320b3f5b9ae46579e8c63ace81f12de1b2be22a6ce2fdef161cb86de90d435ba76105a328fab8aac0f4dfc95a84bfe0", 0xcc}, {&(0x7f00000009c0)="18d627c35c4b9ec2f5a68878d7cbd57adfe92658a207ef1b74ccae6bf08ed1300621ec6bb437950510214989a9708db2f3dafd1bced36de96ccb19a249ba42118d33d9381e61c92dbfdcbbc4ceeead688d2d90985fa439f293ac20c8c238c905bc2faf2f1d67350f8b1a913e86347c456aa20a4224bad2e46f3f0c2ec6", 0x7d}, {&(0x7f0000000a40)="c516a4cd42", 0x5}, {&(0x7f0000000a80)="36d9b254514c05170b68b2a8bcf6cff52a9ded95bcec499928973dcc4721", 0x1e}], 0x5, &(0x7f0000000b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x30}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0xc5, 0x0, 0x4}, @lsrr={0x83, 0xf, 0xd0, [@local, @multicast1, @multicast1]}, @lsrr={0x83, 0x1f, 0x3c, [@dev={0xac, 0x14, 0x14, 0xb}, @multicast2, @local, @remote, @multicast2, @loopback, @loopback]}, @cipso={0x86, 0xb, 0x3, [{0x5, 0x5, "b7329d"}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="f80fa82bd5f4700d0cf714c87b28323525111f6efd7056e7b64c2171748b37d1fdb6bc295f47fa55fadf7a2fb6e2c1230c02fcab055cea370562d752ca60a3f1b0e713fc60369871d38cab5c22", 0x4d}, {&(0x7f0000000c80)="9d132721003e590d2691feff55587ff24dc023f4fe03b21aeaa495922bef18a32572acf87bfbf1f288c69d6ed010d8b61ffb36303e04fc66cf8dbc24836e7e768eae4c4e7829c4932258355a38469923d76c4c916bda818d2cd01f87b44b81924ea56e93b8847c0c802d6f45", 0x6c}], 0x2, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x32, [@broadcast, @multicast2, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x28, 0x58, 0x0, 0x0, [0xa2, 0x7, 0x8, 0x7fff, 0x5, 0x9, 0x10, 0xedfd, 0x25]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x21}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x128}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000ec0)="e71671d84fdf4fe1b616ec5ccc86633fe59393aa6e99117be86812f75f659b5b3121c6046697690e5e6e690bcd80ff43409676335a4781da4cd2aa7ca6b8060e350b3d54a4a9a5158467391b0ae66b5bd13264b3e81a766afaaac2f943930cfff289d4a95a40170e8a31b6ec422b132ded1f73afe9c5c4612b8568be2e5f004de40a4d8ce751e8ad", 0x88}, {&(0x7f0000000f80)="50de1d9073ea7997dabb4520ba8cb4e7df7275e77f5a954b388883f0078923961f8e253a2d3730dc0035fc305f322ff4f290973f02f4127b1220188f69122299ce5283", 0x43}, {&(0x7f0000001000)="7103692a8dbd054195a2bed5899f5882e63869d826a1e8ff41f212f7eccc012b7e26222965d8442e540ba8cceda787758de5b220568b9b6a79369c678f58b20597173aa435082796ce5f29bcee37c6a86a467bb13e564f76a1e42da98b5b8479cae29d832703102934718adf777219d7194f547250b28b9b18bdab78adc98ce53eef27641156f74fc9fc842d810a4a1f473d75eb813e56d49df881e1f807364da4d1bdc6d6115d71d9f67f5fd5d41151fd68e6e2409421ba6fba75cc8293681743ca48c71ae9e8900e52ed6e4a47c1f6ba9e48b299812c2477bc1581df95f5470a49e8f13b0c3d6e4b39426cd78eea", 0xef}], 0x3}}, {{&(0x7f0000001140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001180)="98f529a83b90900590ea22ad2ddd4cc7f1435fb9b749d6f7908038ab8743323242586e8c73b68f5cc2fa80ec1261953a7dc84af68536c5ab99e9b037a76e021b0e98f8293344a06847ce3daa6b9bb02c572405e8c40f81cdff31c3da76a1a5fda217ce428ffe2646442d32d7d439dbf42ef89b52b29d0fba814a2ce8a65080561a434636b0a356173f07b4f30d0e3c25c90b90c1f0ddb2f2ac0ffdfc26", 0x9d}, {&(0x7f0000001240)="57e77c53385714a8385530e470ccdae5c3ff5e1914a8c830c32d631ae1f365eb602dd390c97454976ff26c2f6d4fc9295cd3daa618f35a6d876329047cd7e77000a98edf887e1bb3a428084a966e25387b6d7f057c0acac2cc3a397a3c52edf98a6ad432af7f9b34a73e951d2b9652957cb5869d92b5276bc1d60bdc39e1c52c39662adf144d940f8013714035abda51c068929c", 0x94}, {&(0x7f0000001300)="9092be2ae01e415688ca15074dea97b2d7cbb1791a4ac907d16e91373819a4480993d58b43eb013e6e01e0c35d6aaa48eba626d2abd9b794b7f48ee4d06d0e25486faa067605294484c01ba023c73f83c1dbd8d5c8521f871dbeaa9cf93b48ba91bc740fdb89db6d66e2b74356695a232ea3eb664c73c8a3133de24200cd033ab12c5f58410da43e65c53a7278f02ef71da3", 0x92}, {&(0x7f00000013c0)="b6f9b110630df65f7608647cfc8048647f364c4e56dede24c56031d05909a17fd819cf6851f8b0c42c2c50d97a7a3a66bc7064a497514191577973b0a50dcf5b35ab0c62c50dfe3d49f249e4fcc1277ead39e94004c6fc47934d53701d5a583701b19edbad19fc20261e967d00bc20aeae80e51cbe98f67df2d7870705abcff764599e615cafe07c9b93569e853bd7e3299067a0c6973a73c8aaa9d8f3b582b82038c82fb2619a7ba641a2d96bdfd15aef0cead710631a5786fd6ae742f09718d89b63c24c0b11255a8dea1cab8b0f7c36553b95b6b7d4d03ddbb0025ffa1e7b773907c58be7a00866eb28235f67c5", 0xef}, {&(0x7f00000014c0)="c5452b0c25d1fff3497fdf5e362d7ae9986c5e608d241600", 0x18}, {&(0x7f0000001540)="cffb86403750cc54aa43a702cd1fa383b0735572bc5c1559e79fce027853dddf5606c83ebeae274fce4ce91c40d5882eaa5eaa32975528a4f56b563920aa36de0928b14f9a966d90989ec7b19e89b8d769f194cd77634614df6c153bedbbdbd3475fd40fe8229e84", 0x68}, {&(0x7f00000015c0)="9f42d23ba60906b71dd3b861893e9d7387bc9a54423f260b49525229cb30e28ffb37c8fddd1b5902797c26e3554d34cd28f0156bafff91bc99e6640296dd40aec83b5122ecdd1f0705c95eaa3fa3ffdefc198efda56dd0b65a2e232ed75359fcbc0c65b6ce24a65a463d26a927edf0ed7486e443d7eb3d097cb5a808a64e450bb2afd6ce", 0x84}, {&(0x7f0000001680)="9f9482d0bad40fdc92df243cb829e5d53b57be", 0x13}, {&(0x7f00000016c0)="fe84546399c2c4503d984ea6c8540f76f1a47ff0bd5edc17938bfc30e0223ecd9d3e082825a7f7c945a37990e1d2eb0a92cf19ec56f202e887eb6c4e70fc1a63166e5b85303d4e4abff9deab00abfa7a87f814cf161a86381fcd70cb1ac5ba24f20432766cbd14e474c637eede507496340025b1ef1b4cb6e06fc327827850b2cbcff4edfa6d3f", 0x87}], 0x9, &(0x7f0000001840)=[@ip_ttl={{0x14, 0x0, 0x2, 0xea3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x82a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}], 0x60}}, {{&(0x7f00000018c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001900)="b852df0d8bce88eae51c423620f2b5832093a87564340ff88f7fddb8d0f59013abeaf2a507d0eaaddded416161b9971e5ed8f959a35e4245e55a6a41caec4c558842ad1b8c02ab7e5ae01def6763904a0c7ea8c1feadd7ba80b9659924dee1", 0x5f}, {&(0x7f0000001980)="5060bacea3e25d0bc64ac1e15aa0bfbdd6360e023638a6ad266da5a5f45148075e8e2291915527fdf72f63cf0d35d5d2601fb56555e7dc5b7bf03b845c6ea9a51e45453915fbccffa5be2ffbe2efb99e36ac75402d272f1fa2c3c106abc94a9d6aea3c05f69c06a043e31d1c66", 0x6d}], 0x2, &(0x7f0000001ac0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@end, @rr={0x7, 0x1f, 0xd9, [@empty, @local, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @multicast1, @local, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x56}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x82, [@empty, @local, @empty, @loopback]}, @timestamp={0x44, 0x8, 0x3a, 0x0, 0x7, [0x4]}, @timestamp={0x44, 0x14, 0x65, 0x0, 0x8, [0x2, 0x3ff, 0xffffffff, 0x4]}, @noop, @rr={0x7, 0x1b, 0x6f, [@empty, @multicast1, @local, @empty, @empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x3c, 0x20, 0x3, 0x4, [{@multicast1}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x1c5}, {@private=0xa010100, 0xb}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x6}, {@private=0xa010100, 0x101}]}, @rr={0x7, 0xb, 0x6, [@private=0xa010101, @multicast1]}, @noop, @timestamp_addr={0x44, 0x24, 0x14, 0x1, 0xe, [{@local, 0x4}, {@multicast1, 0xc}, {@local, 0x6}, {@local, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11}}], 0x178}}], 0x9, 0x40c4) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x2, 0x10000, 0x1, 0x0, 0x0, 0xfffffffe}, 0x1c) 4m9.564345393s ago: executing program 2 (id=1737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r7 = geteuid() mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {}], [{@uid_eq={'uid', 0x3d, r6}}, {@euid_gt={'euid>', r7}}, {@obj_user={'obj_user', 0x3d, '&%/'}}]}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r8 = timerfd_create(0x9, 0x80000) timerfd_settime(r8, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) read(r8, &(0x7f0000000000)=""/162, 0xa2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r10, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r10, 0xaec7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) utime(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)={0x7, 0x26}) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x89901) 4m9.498335396s ago: executing program 2 (id=1738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8a1048, 0x0) 4m9.18777468s ago: executing program 2 (id=1741): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async) pread64(r0, 0x0, 0x0, 0x1) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) (async) 4m8.937953902s ago: executing program 33 (id=1741): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async) pread64(r0, 0x0, 0x0, 0x1) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) (async) 3m25.156222197s ago: executing program 0 (id=2004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="7eb722eee44708b17a16633e60dfebca51038edcbaacccb8aa8853088bccf30a5178043e43c422b7d6fcca1eb84fe6f0103016648fe204e42613691ff73056ccf56bf862fbc751ce", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="bf34b918113e6fd179973d6f6ab9ae997a3bd7bad11d0a9bd0834350b07a759676c16c9b28ba8283b487", 0x2a}, {&(0x7f0000000280)="42e9d21064b487f5c380d551a2dcdf7bcb03a33775f784a77819c10f378e458eb06cd029dc1554531fb21ef88a09635d7a44437e88a65034a154a53ab31d1a3238946f614b6f61534400504009004e3610f205bf07b15a923559311dfe9bdbebf8363967df89e38ce99408893a402790c4e0d017cc2bd133f3f54c6637ad2323d2cb2e1b73fdd0830da0b79f20a6fa4664ae575bf2fa4842c465e2c7e6bedfada852ae0c1953d2", 0xa7}], 0x2, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="84c366d0db2ce27929316b0ccff97e6885cf4286e9b75403b2868ef9b22639ac7d1c070be9a472a71d36d191e70c7b0c75859273bedb18e6e15611918d549a6458ff13f8675b3a1433f944d52ca4b3f2d9bc1cd36854dc2441b8fc68f2afebe583270bd29d20d9ad5019e29d894d89de2f650a", 0x73}, {&(0x7f0000000500)="301185fa087b9167126e51694944543a5d851f914ecb5d3c83bd34b4007d9c5f4ebe9186d7e46ae7c665599facb5aad5d48c", 0x32}, {&(0x7f0000000540)="6975a849c08daec6b36e06e56fd50555515fc8394e56c36fa4eb048b9fdafa82c88bb5c7280ba42aa8736856d2349b748996782a29b46fbc4e1ac40b446d7530faafa4f0534b02c2fa18d1652dfe6ee3082abb29fc7be237c81e598369734a28609a9e96cf37455d86ee28f4ce32ec27b5da90abc7e63df2306b30bf057ec8e9cc5a921104fe80aae3c696712b51a689da1db300855eed8ad1b683fdcfbdde212f4adc3b8b74891577874a5f1e3a476263cc5cfb80e844b57fce2fa6aa3062eb5f53d8d9aa193c401d110df253458e884d5637e7041a0620dc5f3dcd0094c84ab8f606fd88", 0xe5}, {&(0x7f0000000640)="71fed7bd", 0x4}, {&(0x7f0000000680)="37f50d470e9321e83bf6401d34a0606d6653af6e8afddb5123542dc496e4c3c0b6731ae179739da2021ad22024dd", 0x2e}, {&(0x7f0000000700)="08501bf2e6de5732d4e64ee4addaef673f9674cd0a8c41c9a6b36abb13a5eaa0216e4b3265ccb1433515e0948edf94efd8e76d1988e807b9e18535", 0x3b}, {0x0}], 0x7, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7f}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@loopback, 0x4ef}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x17, 0xb4, [@remote, @empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x8, [{@local}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1000}, {@broadcast, 0xabac}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x1, [0xfffffff9, 0x1]}, @rr={0x7, 0x7, 0x70, [@empty]}]}}}], 0xd8}}], 0x3, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 3m25.133503029s ago: executing program 0 (id=2005): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e67676765420f21d2f26466440f35c74424003c000000c7442402ad7d9c79ff1c2426460f01d166baf80cb8a0b4f888ef66bafc0c66b8007066ef3665a00bae00000000000066baa000ed362665470fc75a00b9800000c00f3235008000000f300f2219", 0x64}], 0x1, 0xa, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x3}) (async) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 3m25.03834126s ago: executing program 0 (id=2006): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x21, 0x25, {0x25, 0x23, "a3811b59f34a9fde39224416309f3572ca5ad7b4225c46f10166a19e17d9f62fa4c371"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="2015c1000000809cbc9a426b80c878df4f65c101152610a35c02ec90aa1ae07a12fdff8fc24de0dc0b45ba337a129747773d6bba68268450ef1b35392b54e9d474a8674bbe6e9ce809516fc7b9e26d52e2924db39b5b5d7b7478c76203a50d00aed7790fe6aa08b4f7ed5fe6249969b20b05b50934fd705dde1bc8bafc3f951a993eb4d22a6cf3b0c65a53a4353581a85edc6d62915303505d7f1efef0fd6a6af098b224e41ec6a25f3cbbe03439ae566ba981eed49a2eecf28f3d57c5f4c1dbf4269a612bc03d63851166c816218ca820cb60ee177958ee30b900e632fb89794d3b548166e29aac4f4ed551"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xfffc, 0xa896, 0x4, 0x7a1, 0xddcc, 0x4, 0x0, 0x1000, 0x3, 0xf, 0x3, 0x9}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x80d}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000140)={0x1}, 0x8, 0x800) msgrcv(0x0, &(0x7f0000000380)={0x0, ""/6}, 0xe, 0xf7e6d451bfde6a7f, 0x3800) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000006c0)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0x97, {0x97, 0x22, "c171a234b1a7752a6f55dcd4d7ba8963e8814c7dd4ddd142021674170f2f6cd33a6f8247ffc70d494d141da9059fd75fda7004190907b832940c8fcd207d9bd188c3ea80bd3ec5766eadaddee02eb03b59042770df4d80a3785c125c4e86c61f8790610f407e8a6d15e50f7d7a2bb07ad4d26fb84174d10ff92f6a2cf07bf182e1c81cc2551a0a2c47581f416a7d772e7c6a715a85"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000700)={0x20, 0x14, 0x74, "5869b7281364eaf614a86c13aa0a93ec527f0ec58110b466c5b1f5c293c717faac1a642084abfbb94cd8ff05fb88c6635e7356e39ebf44942535bd0b0735f3e04a81c1c7b788e82bf9ca73f73775d36e26c039267cc359940d466deb6ce94ac321dc33beaffcfd13cd7e2944699f856a7baa9a0f"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x5, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x302, 0xf9, 0x6, 0x4}, 0x10) listen(r0, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x368, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x304, 0x5, 0x0, 0x1, [@nested={0x300, 0x124, 0x0, 0x1, [@generic="e52cfdc68ae361504fb4c62b8d9ac5e3dbef730cb2cf00eac243342b13b4b2783e39f91b", @nested={0xc1, 0x95, 0x0, 0x1, [@nested={0x4, 0x151}, @generic="9f04e2e04c5e100d9e58807b0096f337701f7abd7496b5b3ca4cc3c940ca62110404496d613fb09e1b288a498db87682d4352c7b0bdf2c65590cd71a73eb0e7784562bf1f677c65ddb15175cb931cab7a37a62f6e4c9c52327f48dd9952d429bb2a199dc6ddee341de7a400bdd0e6928657e2de5a6d05869fb6773ae19db71894e2711b8864a9b1d9178a18d0e0329ae717bc4892619efe6e32e57f3b248aab32dbf6abddece7fa450210297ee", @typed={0x8, 0xac, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}]}, @typed={0x4, 0x138}, @nested={0x20d, 0x110, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast1}, @generic="11277c096e5b2d7552ca4f113df5e2b9cb2c8a2aedb1ac80f4027491f90f75b0286a2340c5a0f49430ed6ffe7c03ece4148486d5976f0ae19577fbfc7a8d2ca4f725832d", @generic="037e1ee9f7b0a4220dd524d682cc8cbbbdea4835ea4084f3a42b8263beaacbb438155fb626b5605be64b919ff93802c1e5e24c6193c4198fee8b119e011113f8920122e3b4fffc8efce6031d349a3848fc3126e8aeb1d282b47c74f6e6648e6179a4be3bd11a2c4b84623e4129c26e0c4a7b9293fb5b2598cd45c43ab1910968bb4aff9c74ad264076f3134d86dc36948a4daa60062b27cb2fefcf86572d37bcd40a7ed907bb11a98cea45381165f55a6fe6bd1897874865ab2987ae36390edcc29f987d98c534e2", @generic="081b173ca8c2c3138757b83f4768f5a0e07d1416eb8cc8d0fac2af900348d0587fd3d18489f4d44c5fd6f5a340322156f395402e880b7def364e3d08298d018b6e2a2eacfb0fe275314f07c051c112b70523e0dd9a59166bc4358134bb63c4a540d8545f7f7f85d829", @nested={0x4, 0x53}, @generic="95ee4c3a9c6424b78ca9e13d79519fd93d569f0e73125311f414ab609624114982a1df7b89262ede6bdab02ab1886d3197d0ff5dc7fd26fc1baf07a6b0eac5bb9d7109c54efe4c72aae082e9726422bdaeb64f1eb08e9d04ccd4d078542502ee386e0955d63dabb459ad711c1d", @nested={0x4, 0x1e}, @generic="e0e599aa90e954075c89b6"]}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x804) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf8, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0xf0}, 0x0) 3m21.942154555s ago: executing program 0 (id=2016): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x9) rmdir(&(0x7f0000000180)='./file0\x00') futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0xf8, 0x82}], 0x1, 0x0, &(0x7f0000000300)={0x77359400}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb000088000000000000000000000000000000000000000000005a3e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0258a7b81bfd"], 0x15c}}, 0x4000080) r2 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = mq_open(&(0x7f0000000740)='+\x00', 0x800, 0x40, &(0x7f0000000780)={0x6, 0x5, 0xd5ed, 0xf}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r8, 0x3, {0x0, 0x1, 0x3}}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4, 0x2, 0x0, 0x80, 0x44, 0xc, 0x9}, 0x9c) mq_timedreceive(r4, &(0x7f00000007c0)=""/86, 0x56, 0x2c0000, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f00000000c0)=0x1000000) 3m21.035071321s ago: executing program 0 (id=2019): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x2248485b15138871) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x7fff, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x80c40) accept$unix(r5, 0x0, &(0x7f0000000100)) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180), 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x222a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x40, 0x60}}]}}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x6, 0x9, 0x3}, &(0x7f0000000300)=0x14) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="130000004f0001"], 0x14}}, 0x806) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x3, 0x107, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x3, 0xc0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xe5}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x1, 0x2, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x3, 0x8, 0x0, 0x92, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x2, 0x20, 0x8, 0x1, 0x7b}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x3, 0xfd, "d100"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x9b48, 0x6f, "987a2066deeb"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x369e, 0x7e, "74ea984917"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x9, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9c4, 0x5d, 0x6, 'V'}, @as_header={0x7, 0x24, 0x1, 0x39, 0xfc, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x2, "c4"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x9, 0x3, "cceaa22e08"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x8, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x80, 0xb, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x1, 0xa9, "3440671891d032c6b9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x5, 0x9, "", "53cdb0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x0, 0x4, {0x7, 0x25, 0x1, 0x3, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x41, 0x8, 0x4, 0x1, 0x40, 0x1}, 0x8c, &(0x7f00000004c0)={0x5, 0xf, 0x8c, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x0, 0xff, 0x4, 0x1}, @generic={0x49, 0x10, 0x4, "956ff1b3118417eaf4795f4e7cc8fe3d9695330dc5a2528ac4198292e4129a59c57fceb42b435938010455df8e7fed3135e86e21b05b72bf54d060979329396e6fd142bc535d"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x0, 0xf00f, 0x400}, @ssp_cap={0x20, 0x10, 0xa, 0x40, 0x5, 0x8, 0xf0f, 0x7, [0x3f00, 0xc0, 0xc0cf, 0xc0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x4, 0xffff}]}, 0x6, [{0x48, &(0x7f0000000580)=@string={0x48, 0x3, "91688cc70031c79297af816f5c82028bff335cd4a26569885cbe34505f8b757a55da3c0b5ec2ff34bdb39a68022a94e0e5731148c8140f3bbc95fa9e641435c061ee2c273c6b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x433}}, {0x73, &(0x7f0000000680)=@string={0x73, 0x3, "e2caec766ecaa536d9502f0351244774533e1dc567453baccbbd1fc47234f211ad2049914761737f6d3ed9630803d7d52df5eea1e15748f48a86b649566bfb06a12ae0320b5df29dcb3da95ef171de7e8f55865b33a64a648d1e60c99ad922f1ac49963a4f0c601d49bd0acd699f2d5394"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44b}}, {0xd9, &(0x7f0000000740)=@string={0xd9, 0x3, "1084a04f89993afc97e2f1d922533375e06b73e157a81b714392c440b0d059011b5d9364cd4723541c453668701f34f5320192fac07ecf0ec82865cef0a94890553a6def4a0de4e29a8ac354a532ac977ca4ccd3f159a8e976e94f50532c103a59c911c1486fd1337d0fbe9841d8f16aa7807834cbc3f1ef823ff7bbd64f0b8e7bd7b0c8a476b6df3fad01e9a9d2e1c046127c3a5d0c3d08dbda7d9e4f3099a88690a9e5674d67b500ef27633b602d107784b80afba19aa8dfc42a72bd04d40d71cda5295ff10f7034c66ae24d500685fe81af553fa22e"}}]}) 3m20.393385631s ago: executing program 0 (id=2025): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e220102030109021b0001020000000904ae0001c300000000058202ff03005e00"], 0x0) 3m20.104101291s ago: executing program 34 (id=2025): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e220102030109021b0001020000000904ae0001c300000000058202ff03005e00"], 0x0) 2m40.436008522s ago: executing program 1 (id=2232): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$vcsu(&(0x7f0000002140), 0x32, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0x580}, 0x0, 0x0, 0x0, 0x0, 0x0}}) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m39.532260019s ago: executing program 1 (id=2235): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2e599832ced580"], 0x20}, {&(0x7f00000002c0)={0x194, 0x2c, 0xa30, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0xb0}, @typed={0x8, 0x69, 0x0, 0x0, @u32=0xe}, @generic="37dbafe36d004c1a0bda165bbf489bcc7cb93660b67ccce1f27e6a92502c3a9b21ca1fefb9e142857689fe80485e5769330463986ae7f1373216db50998d634501dc182ce9e572ce79cbfae45c440949106bcadac520394d4be38c70b50ae191a403adc71e60955846127584ccf4decfabe13d68ff26b1ff62bf36", @generic="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"]}, 0x194}, {&(0x7f0000000140)={0x1c, 0x3b, 0x400, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x9}]}, 0x1c}, {&(0x7f00000001c0)={0x24, 0x22, 0x200, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0xeb, 0x0, 0x0, @u32=0x40}, @typed={0xc, 0xb1, 0x0, 0x0, @u64=0x3}]}, 0x24}, {&(0x7f000001b700)={0x2a28, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x25bf, 0x43, 0x0, 0x1, [@typed={0xc, 0x10f, 0x0, 0x0, @u64=0x6}, @generic="b50caad71dc733712545dd1ced506dde9bb93ecd21f072ecc77e82305d0c559f144677fd0610ee05cd03b619a393602f2113255d4961ac50e327b0cf547d3996a1a394629a9415ed6d4fdcb53add0df75b6004a198d93e5a45210e1326224cb6e037531c14d94855f41419beb0735091b767241f33ccf67e", @generic="49404f1dff2b6f5aa056b7003b458dc80c1169755a6a1b1077f14257049a4d44c8a8ace678a201bb421293637c874cebc74a943a5328290b96", @generic="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", @typed={0x8, 0x5a, 0x0, 0x0, @pid=r1}, @generic="d6ec0591a07364fa082bbd16558e40462a05106e0b78459bef114f6b476650d6536d8711e8b4dcd9605bb60a6f33ec38e69a53b910ec51994b8102d37aa34a6ca29d8761feed1a1df4ef331af083ef10e255dd70cb6fe34189e215fffbf31e3d3e3e5963f9e1a1cbbdb627d8442dcabd8cfefce0853539f5e7844a9b1c442c414ff4f422ebdee61456b08a922cb9561ce1d263e42497ab7713764658e0ba2077ffaa70867d1aa3cebd33b13238a2f5c1a9bdeb9a8b7885c968ae86848a39c4d1f5ccfbae814eb71e52286853c78ae88b287223c0c4c64d116c050edcd86181c911eaa5e2099ea403b46e95d0d97bd1b6a2f49134fca5", @nested={0x13fc, 0x12b, 0x0, 0x1, [@nested={0x28, 0x20, 0x0, 0x1, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xd, 0x83, 0x0, 0x0, @str='skcipher\x00'}]}, @typed={0x8, 0x14d, 0x0, 0x0, @uid}, @nested={0x1208, 0xc2, 0x0, 0x1, [@generic="bfbb31e68d24bd7a70b1ab4c93d451fd1e563d5dc8682b258a04875dc887ea11a57c44763c152130f0ea1428531510351db75dee2dffc0fcfa6b351a1e012a5f6ec2a60062b97686c67218c0cf9bdd78f20bb28eb6c9b1ab02a5100e4e371559b7ef74425dd3c8095d5527f596d9657ad3c01ecac098f3998acd7cc3141e6ac380d50fe43f315cd589247f539e7df7e268fbcaf2bdba349de601ec4e61088be7a0dd213de91af3be3714c626bd6e29683b371028edfe5f9570b6071abf5f2a834a1df77df3355b1f13b8eefd4ac44ab2d2cb8cd6387ac8862a080fb350f419297bd2", @nested={0x4, 0x13}, @typed={0x4, 0x116}, @nested={0x4, 0x68}, @nested={0x4, 0x7}, @generic="b47f478dd53495b698cb66f6a2d2f493c444a874c27e0464f2cf1f77ffc5bcf3ffd3109085d4f1095cad30beb236c455733c47bb89fb0351e29ce7c783f43dce985313e42732ad76d19b6e1b572f803af08f372d456703b6b8f2397c2eea9dcc744dc2e345f7f0a0f69dd77614b650a6fb35161cacd06abd6be2063d0c50c5fa9e7fe619e5bce9d52a66d0f73efa65880dc52f16e98c084fca2bc2ed03316b8c65fb11f80328", @generic, @generic="de4e85935e9d2256270957c5228397f233ecc4691458b683be71d8b6484f5d046a7734686ca608ca94581185295f5cc7e393038f46458b2b00f93c4c4de92d44833cc14fa0d9f0e0173615a49d2c9e081ef13b736a5ffa10915c0f4d513720e08bd51b49", @typed={0x5, 0x5b, 0x0, 0x0, @str='\x00'}, @generic="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"]}, @generic="40130d089aebbfa52d1aef5de651c0425972220f4f604dd2", @typed={0x8, 0xab, 0x0, 0x0, @uid}, @nested={0x108, 0x76, 0x0, 0x1, [@nested={0x4, 0x9c}, @typed={0xf1, 0x39, 0x0, 0x0, @binary="e15e980c5bed189db41f06abf18681e4887708eb26e7ec6b045b89dfadc91a95ff9d04b23da185f9f4344176cd15730f9e5e0c3e84fd75062912eec2677062899ee1babf7fdbf2662bdf21009ec0e2326cbb60b86977a06fd180f29a66292d63ad9fd82452572b1e7a4f6e5e2b94acc12265cc8118183a8c7ee5e5fb05eeb13b07b1c152ae05c0cc41088324bfcc5e847a1b081c1625736fbaf73a9b9d3331a6f9b3744a51eac23ae0f370b2a1d98b303bf391752aeecc4e162bee0b1be367b84097e0ae8cbcb0fc4ffb4ceba6ffffa1f6aeffcb72f30ee1e463be674ad903f3a858aef9e2d355ac43f9fa83c3"}, @nested={0x4, 0x31}, @nested={0x4, 0xdc}, @nested={0x4, 0x119}]}, @nested={0x98, 0x7c, 0x0, 0x1, [@generic="e9cd49c777e2e144a85cad6d9e8466a07bdb8306bf67b2fad8da5c908f1f3acf6bae0150d2146af2a696062d071fc3c5e26c7284a36064f4645f0372f3e39a1ef4145d2b007524ce660868df60cb20fda7505677e7ec37cf2313af8450360304faf5f9326c657eaff4ea771851c18b38fc218b53fa15fd0b237e0de8c5cd12134c01342ae4658ca4da16d90d5eb26916", @nested={0x4, 0x89}]}]}, @nested={0x4, 0x16}]}, @nested={0x309, 0x7b, 0x0, 0x1, [@generic="af4d852aa5dcb15334fc0985780142343ab59f4175139320f3945bfcbe017de74c300f5ad57a4bba6c67fc935ec5e03d7c2650efd9b4069b7418e1b77aa6e5c2c7f196537237b6853fd5bbfde06022e041e26be8f92472e770c9e095ed46f4e969a686f5acc8e13f4cc25ac40835e173dd6562d937d2b3ed104b20933558326fda3f559691f8284ff1a32a95e88c1ffbe4e46c5b5d8258602800ea179d7264", @typed={0xe, 0x13, 0x0, 0x0, @str='pcbc(aes)\x00'}, @generic="c89ae194d2a63799162a20411610557474f25e6b700f523c396c7f8e4e903adc50f7c49837e1f0f5fb5e68ff71dfd3893070bb6a840807adb81bdac862a83ac7697f61809739b8c9bb6a21d79817bee337dafa7bdcc6342b8ce0c20aa3be83d4ae6a1f31c7b488f2b04e271a46c3b75ba62d1b566aff2c3a6c64215e1989bdfe5e6d826904415ac4e6d6b1933ee252ba03295b0c65458a3e99c82e6ffd994c09cae75e9c0e66e87e0e65faf533fc8bd1a95e5b863aa62cd6a52013bfa23fab318f75e22c505d5a4f65c985872bb9d53190f42b1c802c5f3b07b49b33abbba77bf334a18c6602", @nested={0x4, 0x126}, @generic="897010cc172939a4d2a0b9910398932ed0b55da65bf9f7600f17a4876690ccc7676a43b60562b699e4977cdd4ccb770d4ad3d582d6a5e5d4b0bd7561babae9faf62789c297bcab830bd97511141f1e2a602e2943c5f9ddad37e4a483cb1176572633e0539991f1895b4108fa10cd3e5001a25aea4b1cdae7293e6fa06f2002061110", @nested={0x4, 0x1e}, @generic="d8c30261acd8e2478ee3fd8d3a2b738c6b709fcb294942740225b59ab92ec763e82d515db77a7eb45b099df4d7ebb9176d8942ea", @generic="0b6f806e343fbf0b5efd9dfc4d3a4cca397b0f7ea4bd927ebf843c01caa915bbccc518e5f19a12aeb6441af63533fbaf209552ae52a06a43e4caf4fe9eb81c47dae3500555c9b373e4706b829582b488f31a3ac0e6ae7b6d3f1a237c7d3ee6a7bb5224184c85fa44f52fa19e3df6a315aed62d19efaf4d270acca3dbcbfdd2c84810699849955c9f9e565654aae223c0bd959aa84bd9a89c24abf5c6e60204c3f9b84444728a4c66f20a29cc6b7a6ac4b233"]}, @generic="2caac1", @generic="24b79b6835b9794bf067e49b3df2016240fe5d5f5b9253d112ae1c9f5ccb0a0f65f3bc10f18c3855a4aad40d02aa5795e4b3644b9b3c737ef009c2dfc4f48588445a40befec720c98656d949343dcaddc88ada25b6432590e5ed27b5689c2888a6b1eb9894993ba21bff0029897e5c8e8fec6c6004fb38ab9d3b09c3aa608073ccc3de8f93ebfa5c6b51a281d95be71cc78142d0174d", @nested={0x9f, 0xc2, 0x0, 0x1, [@generic="b2bc796b183df04f6b6a80d7cca3af2d427edded7e16ef6f12b0cdfe78fe58b0e182e8c16ba281c89632a672d302fa1b6d04116a7c96612228c76620c10b5c648f36543a4f723ccaf460526d42fbfc2309cfe8ccd91a182e59756d8370dd205e96ca1c49e448e610767d9793ca3c0a8c4c26ab1a3306da62dbc2c7b5991eeb816939d1a368f131d97dcd860fd00942a1f4f4951003661a01fb40e3"]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x2}]}, 0x2a28}, {&(0x7f00000027c0)={0x508, 0x20, 0x8, 0x70bd27, 0x25dfdbfb, "", [@nested={0x5e, 0x19, 0x0, 0x1, [@generic="286f77002dcc338a08e500f9281eee028fd5892baf864cbd95d05e8e1bdcde6c7359da1eef7bd18daa5ce9d44afe769e4f1c02b6bcb256ee71dd9153eab74e47221c6ec61d0f", @nested={0x4, 0xed}, @typed={0xe, 0xc8, 0x0, 0x0, @str='pcbc(aes)\x00'}]}, @nested={0x39c, 0x34, 0x0, 0x1, [@generic="db811c1285ab4b0416dccf43b389149303fae53967205d6958252bc8ac5e68b6d80add2b2520a58778d91bd475b503884187772376ba58f7ce249adc5b03c2682f87d01ff9d037130eb923b6c3d9aef427fe315ccd777812eb", @generic="21ea8c59364f89cf891da57035e0e82b9a905b5532401daf4d5149", @nested={0x4, 0x7a}, @nested={0x320, 0x2a, 0x0, 0x1, [@typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @nested={0x2ff, 0xe8, 0x0, 0x1, [@nested={0x1b9, 0xe7, 0x0, 0x1, [@generic="a06aa0e1d32615d20de338c58e861713f3eee91ba2bd29e9160928a71c964e37d7c4f38b895fb46334d4ab56d643bf4e3ec89b0535f0efb19dc1e8f7b492062bb61793b1cb78a88f29d70779e362b9cc2b75fbc156a322642b7700386c3a9f8acd8fb722c1e3bcd3d01a4026fe8df6f009924ea6397da56536c11b826aaed19e15632a4bf48c818d429f327348887f8406fc408947562b7d3d2f37bac47408c3ec67db1fbe7c670bc37b879979fd932502456ff7e68c507c976ec52af3415db9c781414eaa7c2a19291aa3ec1113cfe04e1f0a59099872aad78167e18c6cc7e50150da67b9b294e1ed7b50eb909bea79cbb2602f", @generic="0ac789aabd980dd3371d016da58551c16e33b141cb5df8843d94aac9effb39e17152552f4e738e35f0b12b361ccf7e75b119a061599d56defe0c52bb28f5901d1326ace57a41d9b034a089d4c27c4f0ce16b562db45e78c6e33e72b3e4f75936ea637bb3d92da586863f7d38ac9e842435f86fdd60cb1b758ee7753950e65fda1451115b7b2186002c37cb504514a8db0f28a9b566d1c7bdc2ac1556c21eb8a809f3aa74341731b31ac0cc4bc2ac2ac27325e68af44ed133730d180f3218ef46dd"]}, @generic="194a6a051aa0b7a83aa77ed62e032e5bd5a8cd0cd992e796d2bb3452ffb5716ebb6ec67c39e9056cea950b0dc30f74a33ce6c590", @nested={0x4e, 0x7, 0x0, 0x1, [@typed={0xc, 0x9d, 0x0, 0x0, @u64=0x3}, @typed={0xe, 0x4e, 0x0, 0x0, @str='pcbc(aes)\x00'}, @nested={0x4, 0x26}, @nested={0x4, 0x3c}, @typed={0xd, 0xc5, 0x0, 0x0, @str='skcipher\x00'}, @nested={0x4, 0xb0}, @generic="7da742c04b9c622c65623a5d8d7668ea715b"]}, @generic="e2876d664ddf54870a0d2b43ce9b40416044b97a752999da6ac86d3a3f2117faf719534d52db00c3b09bc20ee9fc6832bee1d43ef5d3d08536035979d011a16af9d8f273d940c6213ac648d1e0fa245897d0fddf90bb8da166cf8eeeea261ff62fed5c0102c43ad016d5c216f79aeeae1d8a2522ddb9ab531e5c0d70689a5998b100f9eb0cf758cd1e6924155a66c6473ef1f2c26b0605813f31ea27c442c788847c67294ea1af1a1678ce2de64ad146ba75b3", @typed={0x8, 0xb4, 0x0, 0x0, @pid=r1}]}]}]}, @generic="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"]}, 0x508}, {&(0x7f0000002480)={0x338, 0x3b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@generic="95bdc787e719f6c88e16606da4e501834a4edbeedb09b17047773b7ecbe98ba0bbf80120ec414655b31e3d2b4c75eb56fd74fa90e3944fbacc3c1b978af5983532a5785e223d9d10c851e9172add9eef53816d3afd4ffd9ed5f464927eb6b95237733e1b6679e16ddb51ab83775408", @generic="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", @typed={0x9, 0xc8, 0x0, 0x0, @str='proc\x00'}, @generic="1db9930da5b434dbf6de031f6ee0d55097a1b863621aa154b9520d2776f2a08358b34cffe1c701b3366bac5a2fee288780f21b27fd8aabfba3e062952034d46bf92e9c9a372723d11b1ace5e66df7577", @nested={0x20, 0x129, 0x0, 0x1, [@typed={0xc, 0x7b, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x122}, @typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @nested={0x4, 0xf7}]}, @generic="6a9536e482de7f30b7ebdef2b64a5b9a223fd2e952d9fac0ea0a", @nested={0xc, 0x110, 0x0, 0x1, [@generic, @typed={0x8, 0xa9, 0x0, 0x0, @pid=r1}]}]}, 0x338}, {&(0x7f0000002240)={0x21c, 0x35, 0xe02, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xc, 0x0, 0x0, 0x1, [@nested={0x4, 0x33}, @nested={0x4, 0x4b}]}, @generic="f5876ce2bef010fee8ee24b29c216b526e53c34e10d5af5d0b964be7c9ad6d86ad033781ba87480bf8d9f8c76957a5c873379c5ed964b50d761bc1ac4cdac6849c0f28198ec9ee4973c431d6f0c5337894c5f9f78d7e57596ac34f4b116c029793a290cde05e15304912308a28897c23da6158f4536d9dd0c1f32ee58c3af7aab0394dfb754b6825bceafcab3a74f4609c928211f44bde219e8627f86dfd3a94a1d66c64b18a7f78d233a22171777914a5e203ea24451475cb95b5dc6d08428a31a2b2c3b88e52e7f1e1255f1212853606039dbde2df99842bce856a93db3b9b48d8bcec", @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x2}, @typed={0xef, 0x101, 0x0, 0x0, @binary="5a85b49f1466f027c6b5f5c78cbe4ee70f89f2f59d0f5e5c677f0bb84cf98e62ac928c1a1d2606ce433284acc1f506c5226010ff4980e63453d4a5fead868d23fdfdecc3ca0ddb5d94d454baf18ffb5f93ed2b38fca9c4990b66e93953dfd5cc4e17071e0471f7ddc2769c4af333044bca0e3c28104c3db7ca044bb12514281e7d41bb8974a2723cbb22cb80c3621a7ccc541c59db2ade9cc59ea54828132025617a89092b7803602047a9e4dab33e351b355d3fe485940a8767c70c169b211a62c1316d8d8d2537d5cf4450a06474b3b36352cf2276c9df0c4cbb95f79463b637bb899cd596e3dfc5f0c4"}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x3ff}, @typed={0x4, 0x88}, @typed={0x8, 0x23, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x10b, 0x0, 0x0, @fd=r0}]}, 0x21c}], 0x8, 0x0, 0x0, 0x4}, 0x40) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@local, 0x917}, @host, 0x0, 0x101, 0x80, 0x80000000, 0x1, 0xffffff66}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xa49, 0x3, 0x69c9, 0x2000000004, 0x0, 0x385a2d2f, 0x4, 0x100008000}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x4, 0x3}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x5) accept4(r6, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0)="a7f5", 0x2) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff2, 0x5, 0x8000, 0x400, 0x6, 0x5210012}) 2m38.560661974s ago: executing program 1 (id=2239): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x658, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000001c0], 0x0, &(0x7f00000000c0), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x40, 0x88a2, 'dummy0\x00', 'team_slave_1\x00', 'netpci0\x00', 'veth0_macvtap\x00', @random="135647ed99e4", [0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xb6, 0xb6, 0x106, [@limit={{'limit\x00', 0x0, 0x20}, {{0x0, 0x1, 0x4, 0x2, 0xfffffffa, 0x1}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x401, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x2, [{0x11, 0x0, 0x8884, 'team0\x00', 'pim6reg1\x00', 'rose0\x00', 'nr0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x11e, 0x19e, 0x1ee, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x5, 0x42000, 0x7, {0xfffffffffffffff7}}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x3, {0x3, 0xc, 0xfffc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x9, 0x2, 0x8, 0x4f, @multicast, [0x0, 0x0, 0x0, 0x0, 0xa543690b1d9c78f7, 0xff], 0x4e21, 0x4e21, 0x9, 0x101, 0xfff, 0x1, 0x1ff, 0x7, 0xfe01, 0x40}, 0x0, 0x400}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x9, {0xc000}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x9b, {0xdf34}}}}}, {0x3, 0x39, 0x88f5, 'nicvf0\x00', 'veth1_vlan\x00', 'batadv_slave_0\x00', 'netpci0\x00', @random="a585a442f1a1", [0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff], 0x6e, 0x19e, 0x1ce, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:pam_var_run_t:s0\x00'}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000001}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x5, 0x20, 0x4, 'veth0\x00', 'veth1_to_bond\x00', 'macvtap0\x00', 'dummy0\x00', @empty, [0xff, 0xff], @broadcast, [0xff, 0xff], 0xa6, 0xa6, 0xd6, [@realm={{'realm\x00', 0x0, 0x10}, {{0x12a0ebac, 0x1f2a}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x6d0) r1 = socket$kcm(0x29, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}], [], 0x6b}}) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)}, 0x4000005) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006a"], 0xfe33) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x0, 0x0, 0x0, @time={0x4f, 0x5}, {}, {0x0, 0xfc}, @raw32}], 0x1c) sendmsg$netlink(r0, &(0x7f0000000980)={&(0x7f0000000840)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc, &(0x7f0000000900)=[{&(0x7f0000000880)={0x64, 0x3f, 0x10, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x12a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="96eb14fb27ef8a83b57a278450553da7038d9f4ccc67cf9bd76ffee7004d12eb2cb1eb20371aa5c88ab9", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xcb}, @typed={0x8, 0x133, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}, 0x64}], 0x1, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [r5, r1, r0, r0]}}], 0x20, 0x8010}, 0x20002084) 2m38.44898681s ago: executing program 1 (id=2240): syz_usb_connect(0x2, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000959506105e04e2044d1c010203010902240001000000000904680202bbcd96000905820240"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717", @ANYRES8], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000440)=""/4096) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000200)=@urb_type_interrupt={0x1, {0x0, 0x1}, 0xb, 0x84, &(0x7f0000000040)="cfbef3a0b9884490f189911e0ad0859a97ad5fddf64ff031af936f971de81b7955f481ec8b106a7eaf671ad55b24fca197333fc3ebd8a84aedcc8d3dc726c9e561ac8fb22a8d4dc2db85af715b2fd63399c22cbf77d880dbc5e60becf14a257dd8e9271645b6113ac88729b06ea28650c2b970c18698bb9f04e4d2fcc64843694db769059e379522e19bc225141866a59093a9fa8588c87b66ae6f1fd83f1bfb52c97d9d0d08ffabd259517f9ea95e0f13530fc596d5", 0xb6, 0x3, 0x101, 0x0, 0x5, 0x84, &(0x7f0000000100)="a34d10d1ab112860267aebd8f8adc62a60b5db081524176c6a60260933a7fd73e51b4ec359dc97ea204fdd8ba1309e3c8bf805455b75cbd0104dfa991e592495b0c64e40ad756068d8e884719f920684db81019792386de168be214ffa061e4e8f4f1e170ebabdd22978e1424724be877bd4e903f0307802e545df24784d233294b1c4bf7be21f4c69bbcdefb09799464e04875f416fcee23f767e6ec2835bbfcf571e2528f0db502952ed3070ffd8c82f2a8ecca107772a9301d0120a37a6e1561b2f9d9327c64f45df6ce8bd"}) 2m37.118334349s ago: executing program 1 (id=2253): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x4}) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x49783, 0x0) read$midi(r1, &(0x7f0000000280)=""/31, 0x1f) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x6) (async) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) (async) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xfe15, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) 2m37.036437039s ago: executing program 1 (id=2255): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000106e05e60000000000000109022400010000a000090400000103000000092100000001224500090581034000000200a9742f4f6113511c99776c311bd461ad94b67b4c123a7930c040000000f4e9c2c9328189e0f0cc61e303e96670b67d1a563f0d42218227d8b8e248d8b7c4e449694b00000000000000000000000000000000000000000000df9d865b2bb77329de3115ea43670bbebe4eb6d454e9ecd29169a7ee47b8691f5899cc3dbecc770e8e31bb9b7861c01f67e15f2467054e08f305530bb83521e79bc2ed1aacf85fe681db49345fd9bcba78f75322cd67f67a1989eda97f2629453b1a4f71400c0092e66a77dc3b12d48e22cfb471ddcde545e5c184145ec9e8f3d370d7fa7947e30024a8b535a1015af8d2ea0015a7f93cfec35719e27774d16e3268421d0945ff6ab9892716443b67c746f85ed5d5678b91ea2ddb8bcdd6e826c20d000000000000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x5d02, &(0x7f0000000000)={0x0, 0x6f3, 0x80, 0x1, 0x51}, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x4902) r4 = semget$private(0x0, 0x6, 0x40d) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_usb_disconnect(r1) semop(r4, &(0x7f0000000180)=[{0x3, 0xe1}, {0x3, 0x101, 0x800}], 0x5c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0x100000001, 0x4, 0x8000, 0x15c, 0x155, 0x7, 0xb, 0x80, 0xabbb, 0x3, 0x1, 0xf156, 0x1, 0x0, 0x41a0, 0x7fff, 0xc, 0x3, 0xffffffffffffffc8, 0xffff, 0x987, 0x6, 0x2, 0x3}) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='j', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0xffffffffffffffff) fallocate(r3, 0x0, 0xb4d, 0xe) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, r2}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) 2m21.861198062s ago: executing program 35 (id=2255): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x5d02, &(0x7f0000000000)={0x0, 0x6f3, 0x80, 0x1, 0x51}, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x4902) r4 = semget$private(0x0, 0x6, 0x40d) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_usb_disconnect(r1) semop(r4, &(0x7f0000000180)=[{0x3, 0xe1}, {0x3, 0x101, 0x800}], 0x5c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0x100000001, 0x4, 0x8000, 0x15c, 0x155, 0x7, 0xb, 0x80, 0xabbb, 0x3, 0x1, 0xf156, 0x1, 0x0, 0x41a0, 0x7fff, 0xc, 0x3, 0xffffffffffffffc8, 0xffff, 0x987, 0x6, 0x2, 0x3}) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='j', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0xffffffffffffffff) fallocate(r3, 0x0, 0xb4d, 0xe) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, r2}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) 1m33.200215869s ago: executing program 6 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="7eb722eee44708b17a16633e60dfebca51038edcbaacccb8aa8853088bccf30a5178043e43c422b7d6fcca1eb84fe6f0103016648fe204e42613691ff73056ccf56bf862fbc751ce", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="bf34b918113e6fd179973d6f6ab9ae997a3bd7bad11d0a9bd0834350b07a759676c16c9b28ba8283b487", 0x2a}, {&(0x7f0000000280)="42e9d21064b487f5c380d551a2dcdf7bcb03a33775f784a77819c10f378e458eb06cd029dc1554531fb21ef88a09635d7a44437e88a65034a154a53ab31d1a3238946f614b6f61534400504009004e3610f205bf07b15a923559311dfe9bdbebf8363967df89e38ce99408893a402790c4e0d017cc2bd133f3f54c6637ad2323d2cb2e1b73fdd0830da0b79f20a6fa4664ae575bf2fa4842c465e2c7e6bedfada852ae0c1953d2", 0xa7}], 0x2, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="84c366d0db2ce27929316b0ccff97e6885cf4286e9b75403b2868ef9b22639ac7d1c070be9a472a71d36d191e70c7b0c75859273bedb18e6e15611918d549a6458ff13f8675b3a1433f944d52ca4b3f2d9bc1cd36854dc2441b8fc68f2afebe583270bd29d20d9ad5019e29d894d89de2f650a", 0x73}, {&(0x7f0000000500)="301185fa087b9167126e51694944543a5d851f914ecb5d3c83bd34b4007d9c5f4ebe9186d7e46ae7c665599facb5aad5d48c", 0x32}, {&(0x7f0000000540)="6975a849c08daec6b36e06e56fd50555515fc8394e56c36fa4eb048b9fdafa82c88bb5c7280ba42aa8736856d2349b748996782a29b46fbc4e1ac40b446d7530faafa4f0534b02c2fa18d1652dfe6ee3082abb29fc7be237c81e598369734a28609a9e96cf37455d86ee28f4ce32ec27b5da90abc7e63df2306b30bf057ec8e9cc5a921104fe80aae3c696712b51a689da1db300855eed8ad1b683fdcfbdde212f4adc3b8b74891577874a5f1e3a476263cc5cfb80e844b57fce2fa6aa3062eb5f53d8d9aa193c401d110df253458e884d5637e7041a06", 0xd7}, {&(0x7f0000000680)="37f50d470e9321e83bf6401d34a0606d6653af6e8afddb5123542dc496e4c3c0b6731ae179739da2021ad22024ddfadf69b3cba30cb8d6fd13a3463fa9c653f815b5001f2528747b057ded73b997dc35e9aa9a887ee93066c94e8374", 0x5c}, {&(0x7f0000000700)="08501bf2e6de5732d4e64ee4addaef673f9674cd0a8c41c9a6b36abb13a5eaa0216e4b3265ccb1433515e0948edf94efd8e76d1988e807b9e18535", 0x3b}, {0x0}], 0x6, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7f}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@loopback, 0x4ef}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x17, 0xb4, [@remote, @empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x8, [{@local}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1000}, {@broadcast, 0xabac}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x1, [0xfffffff9, 0x1]}, @rr={0x7, 0x7, 0x70, [@empty]}]}}}], 0xd8}}], 0x3, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 1m33.062077311s ago: executing program 6 (id=2600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xec, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @empty}}, 0xfffff86e, 0x0, 0xa, 0xa4, 0x68, 0x4, 0x83}, &(0x7f0000000180)=0x9c) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m32.784410626s ago: executing program 6 (id=2602): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x603, 0xff00, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1m32.118487155s ago: executing program 6 (id=2606): r0 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad3090503101000740406090403"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/377, 0x179) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2100110) 1m29.2203442s ago: executing program 6 (id=2620): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:N,', @ANYRESDEC]) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000f40)=@ethtool_gstrings={0x1b, 0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)={0x238, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x71}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd8, 0x3, "d9353ed7916818878b936de250989db9265fbbac07f9f46345321826f8b8719270431e4fd63cf5a2a583549b982a6eaea964f68aaf1d15425ed8d30a935c48accbb94430677390a830b759f5b8477f8d9adeb4fc0790193e38b7a06f02919eac52ff02db704087f2118c48a7fdeeed658fd71e0ace6aa8d94ef925c51707e8d3a68fb892938345d7a98f1918dabeb3d24b4db019705c736e97a9a5f5fa0975d1864d8dd1d849cc92bf3e6aa0c1c893a47d98e5728bfd851627bad4350fbc5b71f938e6d180194065d1e472b0d6e984792d1c9d5e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x17, 0x3, "fd943b54eefd9891d4c46d972f8f89809d4eb1"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x90a}, @TIPC_NLA_NODE_ID={0x10, 0x3, "e9c6073850596f5529ca1029"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "a914bdda5796c0b2011d0e2090dee242e80d55da19d73355199d26b2404ea299ca1313f5cebb7df48613"}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffd3af}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7c02}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000040}, 0x881) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1m28.376396628s ago: executing program 6 (id=2622): close(0xffffffffffffffff) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r1, 0x101, 0x70bd2a, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r3) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@wrmsr={0x1e, 0x20, {0xa6e, 0x100000000}}, @cpuid={0x14, 0x18, {0x4, 0x7}}, @code={0xa, 0x53, {"f2420f7c34d5087da57c3ef0470fc70965f30f1bebc442b3f6c20f20e035400000000f22e00fc769670f18ef4f0fc72e66baa10066b8e00066ef0ff9946eb8000000"}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x100, 0x2}}, @uexit={0x0, 0x18, 0x95}, @code={0xa, 0x53, {"660f3a620c84f966baf80cb8a1524a8aef66bafc0cb0ffee470f01f8b9850400000f32450f01f63626460fc75af746dfc44f0fc76de136f3400fc77080c48283f612"}}, @rdmsr={0x32, 0x18, {0x32e}}, @rdmsr={0x32, 0x18, {0x48c}}, @code={0xa, 0x8a, {"66baf80cb82e643181ef66bafc0c66ed48b8be640000000000000f23d00f21f8351000000f0f23f866baf80cb8f8d4d68fef66bafc0c66ed66ba6100b800000080efb9490300000f3267410f30c7442400e0000000c744240208000000ff2c240f01f866baf80cb83c709b89ef66bafc0cedb9ca0800000f32"}}, @code={0xa, 0x50, {"40c1b70b00000086400f3266410f38398180c20000c4c2fd34e666ba4100b000eec4231548f3d20f01c2b9320200000f32450f79b91fe20000c421a971d45f"}}, @code={0xa, 0x72, {"b95f0200000f32400f21b20f798666b0000066ba4000b0adeec4829d070ac7442400d965a9bdc744240200400000c7442406000000000f0114242ed177000f212ec744240000500000c744240200480000c7442406000000000f011424400f01df"}}, @cpuid={0x14, 0x18, {0x80000000, 0x9}}, @cpuid={0x14, 0x18, {0x2, 0x3ff}}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @rdmsr={0x32, 0x18, {0x98e}}, @cpuid={0x14, 0x18, {0x24, 0x300}}], 0x322}) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) fcntl$setsig(r4, 0xa, 0x22) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x163400, 0x20) sync() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000001c0)) sync() 1m12.40185974s ago: executing program 36 (id=2622): close(0xffffffffffffffff) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r1, 0x101, 0x70bd2a, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r3) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@wrmsr={0x1e, 0x20, {0xa6e, 0x100000000}}, @cpuid={0x14, 0x18, {0x4, 0x7}}, @code={0xa, 0x53, {"f2420f7c34d5087da57c3ef0470fc70965f30f1bebc442b3f6c20f20e035400000000f22e00fc769670f18ef4f0fc72e66baa10066b8e00066ef0ff9946eb8000000"}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x100, 0x2}}, @uexit={0x0, 0x18, 0x95}, @code={0xa, 0x53, {"660f3a620c84f966baf80cb8a1524a8aef66bafc0cb0ffee470f01f8b9850400000f32450f01f63626460fc75af746dfc44f0fc76de136f3400fc77080c48283f612"}}, @rdmsr={0x32, 0x18, {0x32e}}, @rdmsr={0x32, 0x18, {0x48c}}, @code={0xa, 0x8a, {"66baf80cb82e643181ef66bafc0c66ed48b8be640000000000000f23d00f21f8351000000f0f23f866baf80cb8f8d4d68fef66bafc0c66ed66ba6100b800000080efb9490300000f3267410f30c7442400e0000000c744240208000000ff2c240f01f866baf80cb83c709b89ef66bafc0cedb9ca0800000f32"}}, @code={0xa, 0x50, {"40c1b70b00000086400f3266410f38398180c20000c4c2fd34e666ba4100b000eec4231548f3d20f01c2b9320200000f32450f79b91fe20000c421a971d45f"}}, @code={0xa, 0x72, {"b95f0200000f32400f21b20f798666b0000066ba4000b0adeec4829d070ac7442400d965a9bdc744240200400000c7442406000000000f0114242ed177000f212ec744240000500000c744240200480000c7442406000000000f011424400f01df"}}, @cpuid={0x14, 0x18, {0x80000000, 0x9}}, @cpuid={0x14, 0x18, {0x2, 0x3ff}}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @rdmsr={0x32, 0x18, {0x98e}}, @cpuid={0x14, 0x18, {0x24, 0x300}}], 0x322}) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) fcntl$setsig(r4, 0xa, 0x22) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x163400, 0x20) sync() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000001c0)) sync() 8.328463971s ago: executing program 4 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="7eb722eee44708b17a16633e60dfebca51038edcbaacccb8aa8853088bccf30a5178043e43c422b7d6fcca1eb84fe6f0103016648fe204e42613691ff73056ccf56bf862fbc751ce", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="bf34b918113e6fd179973d6f6ab9ae997a3bd7bad11d0a9bd0834350b07a759676c16c9b28ba8283b487", 0x2a}, {&(0x7f0000000280)="42e9d21064b487f5c380d551a2dcdf7bcb03a33775f784a77819c10f378e458eb06cd029dc1554531fb21ef88a09635d7a44437e88a65034a154a53ab31d1a3238946f614b6f61534400504009004e3610f205bf07b15a923559311dfe9bdbebf8363967df89e38ce99408893a402790c4e0d017cc2bd133f3f54c6637ad2323d2cb2e1b73fdd0830da0b79f20a6fa4664ae575bf2fa4842c465e2c7e6bedfada852ae0c1953d2", 0xa7}], 0x2, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000500)="301185fa087b9167126e51694944543a5d851f914ecb5d3c83bd34b4007d9c5f4ebe9186d7e46ae7c665599facb5aad5d48c", 0x32}, {&(0x7f0000000540)="6975a849c08daec6b36e06e56fd50555515fc8394e56c36fa4eb048b9fdafa82c88bb5c7280ba42aa8736856d2349b748996782a29b46fbc4e1ac40b446d7530faafa4f0534b02c2fa18d1652dfe6ee3082abb29fc7be237c81e598369734a28609a9e96cf37455d86ee28f4ce32ec27b5da90abc7e63df2306b30bf057ec8e9cc5a921104fe80aae3c696712b51a689da1db300855eed8ad1b683fdcfbdde212f4adc3b8b74891577874a5f1e3a476263cc5cfb80e844b57fce2fa6aa3062eb5f53d8d9aa193c401d110df253458e884d5637e7041a0620dc5f3dcd0094c84ab8f606fd88", 0xe5}, {&(0x7f0000000680)="37f50d470e9321e83bf6401d34a0606d6653af6e8afddb5123542dc496e4c3c0b6731ae179739da2021ad22024ddfadf69b3cba30cb8d6fd13a3463fa9c653f815b5001f2528747b057ded73b997dc35e9aa9a887ee93066c94e8374", 0x5c}, {&(0x7f0000000700)="08501bf2e6de5732d4e64ee4addaef673f9674cd0a8c41c9a6b36abb13a5eaa0216e4b3265ccb1433515e0948edf94efd8e76d1988e807b9e18535", 0x3b}, {0x0}], 0x6, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7f}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@loopback, 0x4ef}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x17, 0xb4, [@remote, @empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x8, [{@local}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1000}, {@broadcast, 0xabac}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x1, [0xfffffff9, 0x1]}, @rr={0x7, 0x7, 0x70, [@empty]}]}}}], 0xd8}}], 0x3, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 8.292915896s ago: executing program 4 (id=2991): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09e269"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20", @ANYBLOB="a9028a297fda4d36fe2215d6c16c4191abcf1dd35b27a9ce48b3da869a1d5269c7cb194f14b4a65dd26cf99c1ace56bd8c53190f90ee8a6028af8e869221a6acb8658fcdc4"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRES8, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @private1, 0x37}, 0x1c) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0x100000000000000, 0x3000, 0x3, 0xd, 0x1b}) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$sierra_net(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x0, 0x7, 0x4a, {0x4a, 0xb, "d696e5463ff8f5455d431e64229f6d10b0c4122085a05c77e1dadabb18589e07425bfc4e63c9002a299bc66098d7d13d3dc8132c148b73fef05748247281b270f4b07fccd8d67fed"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000640)={0x0, 0x1, 0xf8, "8e801f3c04c11e17417a0508836320c043dbbda55590657490eb06f71e342efe041dfd19239599a6b401dcfd3d4d5e871962c419e2d5e6cb53f8eaf486556dad483cabd729e1f97d15bc2cfa615e319d12a1a559783a2694b13816636ab6dd7d31819c2d9423384cb137ebf7b9136bde53e3a4ff73ecf8f24145b5c3f729ad86e8d40784bf992a18a0dc290f111d83df407358e0da8524bc38d978a613ec77efe460e249720878576af99574d1faadd0f17a5cac33dfd92440dc928179e203ac6d3478434d1c28d858e790bdd4a3d05447093bbbf1c6306e88d1d878f159aed453ab82c058e0e4c4e9e679bea2c52b809ce600c871791d7c"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)={0x21, 0x0, 0x3, "8e368a"}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x800}}, './file0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x9, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @null, @null, @bcast, @default]}) 5.390200474s ago: executing program 8 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c0000000107030001000000a038020ddfc6c8490c000240000000000000000109000000010c00034000000000000000020c00064000000000000000800900010073797a3100000000340007800800024000000fb508000600000000080800014000010000080002400000000d08000140ffffffff0800ed6e0e6a49dab26602400000007f"], 0x8c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008800) (rerun: 32) 5.160354863s ago: executing program 4 (id=3008): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r3, 0x0, 0xc00, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0xfffffffffffffffe) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x2, 0x0, 0x1000}, {0x2}], 0x2) semop(r4, &(0x7f0000001240)=[{0x0, 0xe7}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'ip_vti0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe16, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r5, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) 5.159927546s ago: executing program 8 (id=3009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="7eb722eee44708b17a16633e60dfebca51038edcbaacccb8aa8853088bccf30a5178043e43c422b7d6fcca1eb84fe6f0103016648fe204e42613691ff73056ccf56bf862fbc751ce", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="bf34b918113e6fd179973d6f6ab9ae997a3bd7bad11d0a9bd0834350b07a759676c16c9b28ba8283b487", 0x2a}, {&(0x7f0000000280)="42e9d21064b487f5c380d551a2dcdf7bcb03a33775f784a77819c10f378e458eb06cd029dc1554531fb21ef88a09635d7a44437e88a65034a154a53ab31d1a3238946f614b6f61534400504009004e3610f205bf07b15a923559311dfe9bdbebf8363967df89e38ce99408893a402790c4e0d017cc2bd133f3f54c6637ad2323d2cb2e1b73fdd0830da0b79f20a6fa4664ae575bf2fa4842c465e2c7e6bedfada852ae0c1953d2", 0xa7}], 0x2, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)}, {&(0x7f0000000500)="301185fa087b9167126e51694944543a5d851f914ecb5d3c83bd34b4007d9c5f4ebe9186d7e46ae7c665599facb5aad5d48c", 0x32}, {&(0x7f0000000540)="6975a849c08daec6b36e06e56fd50555515fc8394e56c36fa4eb048b9fdafa82c88bb5c7280ba42aa8736856d2349b748996782a29b46fbc4e1ac40b446d7530faafa4f0534b02c2fa18d1652dfe6ee3082abb29fc7be237c81e598369734a28609a9e96cf37455d86ee28f4ce32ec27b5da90abc7e63df2306b30bf057ec8e9cc5a921104fe80aae3c696712b51a689da1db300855eed8ad1b683fdcfbdde212f4adc3b8b74891577874a5f1e3a476263cc5cfb80e844b57fce2fa6aa3062eb5f53d8d9aa193c401d110df253458e884d5637e7041a0620dc5f3dcd0094c84ab8f606fd88", 0xe5}, {&(0x7f0000000680)="37f50d470e9321e83bf6401d34a0606d6653af6e8afddb5123542dc496e4c3c0b6731ae179739da2021ad22024ddfadf69b3cba30cb8d6fd13a3463fa9c653f815b5001f2528747b057ded73b997dc35e9aa9a887ee93066c94e8374", 0x5c}, {&(0x7f0000000700)="08501bf2e6de5732d4e64ee4addaef673f9674cd0a8c41c9a6b36abb13a5eaa0216e4b3265ccb1433515e0948edf94efd8e76d1988e807b9e18535", 0x3b}, {0x0}], 0x6, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7f}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@loopback, 0x4ef}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x17, 0xb4, [@remote, @empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x8, [{@local}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1000}, {@broadcast, 0xabac}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x1, [0xfffffff9, 0x1]}, @rr={0x7, 0x7, 0x70, [@empty]}]}}}], 0xd8}}], 0x3, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 4.985197819s ago: executing program 8 (id=3010): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=[@code={0x1, 0x85, {"65f30f0948b8a2992d438e9db1610f23c80f21f8350400f0000f23f848b866373fdf2a3145320f23d00f21f835100000030f23f8460f35660f2ba4b72255000066b8c8008ee066b8b7008ed86466430f38828809800000f4c744240046d20000c744240204be0000c7442406000000000f011c24"}}], 0x85}) r1 = getpgid(0x0) setresgid(0xee00, 0xee01, 0x0) prlimit64(r1, 0xe, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1, 0x8, 0x9) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.180102514s ago: executing program 4 (id=3013): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x2, 0x0, {0x40, 0x4, 0x0, 0xc, 0x3, 0x0, 0x2, 0x0, 0x120, 0x2000, 0x0, r2, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0748, 0x2b3f, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, '\x00\x00\r\x00'}]}}, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r6, &(0x7f0000000880)=ANY=[@ANYRES16=r0], 0x230) r7 = syz_usb_connect$uac1(0x4, 0xcb, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xc, 0xf0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x3}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x2, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0xe9b3, 0x22, "448944bfbfca"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x8, 0x5, {0x7, 0x25, 0x1, 0x81, 0xa, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x4, 0x23, "34719053e2d7"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0xd, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xa, "925e2ea84fafd0bb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x13, 0x4, 0xd, 0x4, ',', "8782a2"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x45, 0x5}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x0, 0x5, 0xe, 0x20, 0x6}, 0x35, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f3500050710021497050014100402b68b8820a86d3f8c906a3add697014ff07100218500c000b1001029000f6f304001003100be2af2067c79d5ea32eef04c284f577d1e508585bb6e1977f810ddc5a4b9b68513a74bfcf69ed12f31bdbd4b6fd4d8f5a91c2f5bab006727b6c6f593b398a0df23d42a2eed4cb55be8fbbf3fdc44c0396de0dd5ae8eaf9f"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x804}}, {0xf6, &(0x7f0000000280)=@string={0xf6, 0x3, "d8cf6003a0b70955000177510d40916f944960232534b5296b3b347878b38a0c1f60ec71aba901fb4a194d23010bd398183574f88f3cf88dbb1e5dd14f107c6c5491f7db6b36c315d67e4159423f5db062d66da721305db0ac28ead1944bde73f1eb85b5c92c8dcb5c32c63011b128f6b38354f12dd799c9f9b7e887c10492d190800e5efe7e8c235171792e2eea1430c3972e8d996f9e9ce3761e01817fb2aa8563b4663a8908cded0c3d753ce5e875cac9acbb48f7996754466bb5f8063c16cb361ad980d7585f7d9b19d928e5de3dd84bc473ade807ad854cd5ffb3f873113f835a229248aa715a57f782cd0a617f68672710"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x40, 0x6, 0xa5, {0xa5, 0x30, "671c0010280411e824acfe02846201d42999a8e2d90677a173d08fa1c8f887c9890ddfb6dae3429897b25805f4c495fa90a83dad99c5f29da066f646ddc4a860f7f609d4aa7ebc79ef4d87830ab1d0fcdb9a0c0bc23988eb6023c8e6549964b944e4324f25ab1922d0a4d5124aced0eabd3e0d93df8bace9f5a7e5520c2c58adb8a071979e0276ae8743bf21e159977bec767956c4331dbc0c82ce9169dc948c967903"}}, &(0x7f0000000480)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "c907770e82d60913b0a2e85d9deec7e38f66cb65515ac974c07c670158627f53916395b5b186f60deeb1de63767ce159512e2f544742e528746a91327102261ec3478643050a8eaa0ae9523dbcef3ad6c0f107880f944f30a90a96bd"}}}, &(0x7f0000000740)={0x44, &(0x7f0000000540)={0x0, 0xe, 0x28, "fda5e6f4849f8e00a54f29200cd18bd7e56dea562eced769589759d3129d0c9c1224f948526a03d4"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x81, 0x2, "ea11"}, &(0x7f0000000640)={0x20, 0x82, 0x1, "d2"}, &(0x7f0000000680)={0x20, 0x83, 0x2, "4014"}, &(0x7f00000006c0)={0x20, 0x84, 0x1, "1d"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "da51db"}}) 4.006076666s ago: executing program 8 (id=3014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r3}}]}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x5400, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}, {@allow_other}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@flag='posixacl'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/video#\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs/binder0\x00'}}, {@uid_lt={'uid<', r5}}, {@dont_appraise}, {@flag='async'}, {@smackfshat={'smackfshat', 0x3d, '/dev/video#\x00'}}]}}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000300)={0x1}) r7 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f0000000000)={0x1, "4f954bc017c4c443cb7c92f439e74d9ebe0ba3e61884587ac9e100"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000300)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000380)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000400)="8b0b4c"}) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 3.06735722s ago: executing program 8 (id=3022): creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155b, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x491, 0x4, 0x4, 0x7, 0x2, 0x5, 0xe2, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0xe, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x4, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x402, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x80, 0x1, 0x4, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0x3, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x5f, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff4, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x777a, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async) signalfd4(r1, &(0x7f00000002c0)={[0x8]}, 0x8, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.888214739s ago: executing program 5 (id=3024): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000180)=0x80) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0xffffffffffffff7b, 0x24, 0x0, 0x0, 0xffffffff}, 0xdbcb9c0cd4ea0962}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x1, 0x60, 0x0) 2.859697663s ago: executing program 5 (id=3025): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0) 2.794071734s ago: executing program 5 (id=3026): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x800, 0x1, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe2c18bbc98839e8c, 0x110, r1, 0xdce15000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2fec0b000000a2ad"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.740320158s ago: executing program 8 (id=3027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="7eb722eee44708b17a16633e60dfebca51038edcbaacccb8aa8853088bccf30a5178043e43c422b7d6fcca1eb84fe6f0103016648fe204e42613691ff73056ccf56bf862fbc751ce", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="bf34b918113e6fd179973d6f6ab9ae997a3bd7bad11d0a9bd0834350b07a759676c16c9b28ba8283b487", 0x2a}, {&(0x7f0000000280)="42e9d21064b487f5c380d551a2dcdf7bcb03a33775f784a77819c10f378e458eb06cd029dc1554531fb21ef88a09635d7a44437e88a65034a154a53ab31d1a3238946f614b6f61534400504009004e3610f205bf07b15a923559311dfe9bdbebf8363967df89e38ce99408893a402790c4e0d017cc2bd133f3f54c6637ad2323d2cb2e1b73fdd0830da0b79f20a6fa4664ae575bf2fa4842c465e2c7e6bedfada852ae0c1953d2", 0xa7}], 0x2, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)}, {&(0x7f0000000500)="301185fa087b9167126e51694944543a5d851f914ecb5d3c83bd34b4007d9c5f4ebe9186d7e46ae7c665599facb5aad5d48c", 0x32}, {&(0x7f0000000540)="6975a849c08daec6b36e06e56fd50555515fc8394e56c36fa4eb048b9fdafa82c88bb5c7280ba42aa8736856d2349b748996782a29b46fbc4e1ac40b446d7530faafa4f0534b02c2fa18d1652dfe6ee3082abb29fc7be237c81e598369734a28609a9e96cf37455d86ee28f4ce32ec27b5da90abc7e63df2306b30bf057ec8e9cc5a921104fe80aae3c696712b51a689da1db300855eed8ad1b683fdcfbdde212f4adc3b8b74891577874a5f1e3a476263cc5cfb80e844b57fce2fa6aa3062eb5f53d8d9aa193c401d110df253458e884d5637e7041a0620dc5f3dcd0094c84ab8f606fd88", 0xe5}, {&(0x7f0000000680)="37f50d470e9321e83bf6401d34a0606d6653af6e8afddb5123542dc496e4c3c0b6731ae179739da2021ad22024ddfadf69b3cba30cb8d6fd13a3463fa9c653f815b5001f2528747b057ded73b997dc35e9aa9a887ee93066c94e8374", 0x5c}, {&(0x7f0000000700)="08501bf2e6de5732d4e64ee4addaef673f9674cd0a8c41c9a6b36abb13a5eaa0216e4b3265ccb1433515e0948edf94efd8e76d1988e807b9e18535", 0x3b}, {0x0}], 0x6, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7f}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@loopback, 0x4ef}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x17, 0xb4, [@remote, @empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x8, [{@local}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1000}, {@broadcast, 0xabac}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x1, [0xfffffff9, 0x1]}, @rr={0x7, 0x7, 0x70, [@empty]}]}}}], 0xd8}}], 0x3, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 2.371925988s ago: executing program 37 (id=3027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="7eb722eee44708b17a16633e60dfebca51038edcbaacccb8aa8853088bccf30a5178043e43c422b7d6fcca1eb84fe6f0103016648fe204e42613691ff73056ccf56bf862fbc751ce", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="bf34b918113e6fd179973d6f6ab9ae997a3bd7bad11d0a9bd0834350b07a759676c16c9b28ba8283b487", 0x2a}, {&(0x7f0000000280)="42e9d21064b487f5c380d551a2dcdf7bcb03a33775f784a77819c10f378e458eb06cd029dc1554531fb21ef88a09635d7a44437e88a65034a154a53ab31d1a3238946f614b6f61534400504009004e3610f205bf07b15a923559311dfe9bdbebf8363967df89e38ce99408893a402790c4e0d017cc2bd133f3f54c6637ad2323d2cb2e1b73fdd0830da0b79f20a6fa4664ae575bf2fa4842c465e2c7e6bedfada852ae0c1953d2", 0xa7}], 0x2, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)}, {&(0x7f0000000500)="301185fa087b9167126e51694944543a5d851f914ecb5d3c83bd34b4007d9c5f4ebe9186d7e46ae7c665599facb5aad5d48c", 0x32}, {&(0x7f0000000540)="6975a849c08daec6b36e06e56fd50555515fc8394e56c36fa4eb048b9fdafa82c88bb5c7280ba42aa8736856d2349b748996782a29b46fbc4e1ac40b446d7530faafa4f0534b02c2fa18d1652dfe6ee3082abb29fc7be237c81e598369734a28609a9e96cf37455d86ee28f4ce32ec27b5da90abc7e63df2306b30bf057ec8e9cc5a921104fe80aae3c696712b51a689da1db300855eed8ad1b683fdcfbdde212f4adc3b8b74891577874a5f1e3a476263cc5cfb80e844b57fce2fa6aa3062eb5f53d8d9aa193c401d110df253458e884d5637e7041a0620dc5f3dcd0094c84ab8f606fd88", 0xe5}, {&(0x7f0000000680)="37f50d470e9321e83bf6401d34a0606d6653af6e8afddb5123542dc496e4c3c0b6731ae179739da2021ad22024ddfadf69b3cba30cb8d6fd13a3463fa9c653f815b5001f2528747b057ded73b997dc35e9aa9a887ee93066c94e8374", 0x5c}, {&(0x7f0000000700)="08501bf2e6de5732d4e64ee4addaef673f9674cd0a8c41c9a6b36abb13a5eaa0216e4b3265ccb1433515e0948edf94efd8e76d1988e807b9e18535", 0x3b}, {0x0}], 0x6, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7f}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@loopback, 0x4ef}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x17, 0xb4, [@remote, @empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x8, [{@local}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1000}, {@broadcast, 0xabac}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x1, [0xfffffff9, 0x1]}, @rr={0x7, 0x7, 0x70, [@empty]}]}}}], 0xd8}}], 0x3, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) 1.708368727s ago: executing program 7 (id=3030): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000040c0)=""/177, 0xb1}], 0x2, 0x0, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="e14f3af4d2fc9003829d5542a47220edbc42404548eb7211121515286f31e1f6b781402c0d56ec2ac5c954eba6e88a9efbae7b685f1b939f4f6dd97d5e9c838d", 0x40}, {&(0x7f0000000700)='X', 0x1}], 0x2}}], 0x1, 0xc4) (async) r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) read$FUSE(r0, &(0x7f0000005e40)={0x2020}, 0x2020) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x511000, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000000340)={0x5, 0x1, &(0x7f0000000240)=[0x65], &(0x7f0000000280)=[0xf67f, 0xda9, 0xe43, 0x23e9, 0x401, 0xc4, 0x7fff, 0xa], &(0x7f00000002c0)=[0x2, 0x6, 0x40, 0x7, 0x4, 0x5829, 0xfffa, 0x401, 0x4, 0x6160], &(0x7f0000000300)=[0x8001, 0xffff]}) 1.444441044s ago: executing program 7 (id=3031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a090400000000000000000a0000010900010073797a3100000000400004803c0001800900010068617368000000002c0002800800024000000014080001400000001708000440000000e7080006400000000108000740000000010900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44085}, 0x4040014) 1.377923148s ago: executing program 7 (id=3032): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x44040, &(0x7f0000000040)={0xc9, 0x888e, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x40005, 0x9}}) 1.212525228s ago: executing program 5 (id=3033): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) (rerun: 32) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f00000003c0)={0x6248, 0xcf88}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000380)={0x0, 0x0, 0x0}) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000ac0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000300)=r7) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r3, r4, r7, 0x0, 0x0, 0xfffffffffffffcbf, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000280), &(0x7f0000000300)=[r9], &(0x7f0000000440)}) (async, rerun: 32) sendto$inet(r1, &(0x7f00000010c0)="2faea58f8c0fe092e56251f8f7b363be9f873942547018d941ac39423e9ee2643480243e943922825b49812a2bfe83d90dbcafb70bcf6467034f163c21c650a4abaabb6e1a70d0546dc026b004a7b87684d22e90143e929cca3eca6b0bbe454bf9b3dcb4d744fadad06f5ad66e62", 0x6e, 0x8090, 0x0, 0x0) (rerun: 32) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002e9585b08191d0001e97a0102030109021b0001020d0000090423070171a39a0109050c03080005ac0b9a99923299235fb16925edbc9b0124c8e070cfa82783d1444d0191a1628d40b6d42f2d53e1ce31ee12a0cbe0e80b9b31c957e19ec6aa36dc9ccbd0fb0de4d4c5b939444468ca59153ee489b7f29c87ff6eee207933c8c0c920791f7c80141db35384b724f5838b9c0513392293c17efab4adb5947223cfa8358a05feaad9f23be9aa2008ccdeb614bf60c374e6f9bbfc4e1d718106a5deb8dc4f1ef4943a4508a5ef02d4f2683afa49b9b8941c25f26a99f45eef1e6442ad09cdd0a1fee22975b7da751656b37ece02cd41bad8b28d8ae35348273bd5b35df20bbc9f8d28dfb8d7f55c905a8a2a84"], &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nomand\x00', 0x0, 0x0) (rerun: 32) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_blocks=m']) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) (async, rerun: 32) eventfd2(0x3, 0x1) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async, rerun: 64) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (rerun: 64) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES8=r8, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16, @ANYRES16], 0x0) 1.108264145s ago: executing program 5 (id=3034): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004200)='/sys/power/sync_on_suspend', 0x40082, 0x14c) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004280)={0x32, 0x4, 0x0, {0x5, 0x10, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x10, 0x50, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc5, 0xa9, 0x1}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0xa9, 0x8, "fd7754bbc0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x9, "67becd658e7ce772b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0xd7, 0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x7, 0x1000, 0x1000, &(0x7f00000004c0)="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", 0xf1, 0x0, &(0x7f0000000140)="6eea5cfdc6d2773a524185560305890a71fd10c572617a381cbcbdbb99560fd0cd640995803c79bfd54c0d71696444975b8b3583c4c993c17f232555c3cf77106cd400a11216f1f68934a5d8d09187b0b265d28c47016a4bef7abcba393617d4e66722eb480afe6eb746295ada54ca424d22536c67e2efebb4e2928969dbea5232a7ed7f55295f82375caca4effbcf08e159d2fe4f6675eaa49fabda2701855d247ec77065771f2aa4eb53c5ee3b03443f101e9a803fb7e1d1fc5b73bf472e8649f131f01fa20dc70d5243970fa605683622590fb908d81e89d94bd92c0ba17059b7c01ff33606358601f116309d04716c"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000004200)='/sys/power/sync_on_suspend', 0x40082, 0x14c) (async) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004280)={0x32, 0x4, 0x0, {0x5, 0x10, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x10, 0x50, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc5, 0xa9, 0x1}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0xa9, 0x8, "fd7754bbc0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x9, "67becd658e7ce772b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0xd7, 0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x7, 0x1000, 0x1000, &(0x7f00000004c0)="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", 0xf1, 0x0, &(0x7f0000000140)="6eea5cfdc6d2773a524185560305890a71fd10c572617a381cbcbdbb99560fd0cd640995803c79bfd54c0d71696444975b8b3583c4c993c17f232555c3cf77106cd400a11216f1f68934a5d8d09187b0b265d28c47016a4bef7abcba393617d4e66722eb480afe6eb746295ada54ca424d22536c67e2efebb4e2928969dbea5232a7ed7f55295f82375caca4effbcf08e159d2fe4f6675eaa49fabda2701855d247ec77065771f2aa4eb53c5ee3b03443f101e9a803fb7e1d1fc5b73bf472e8649f131f01fa20dc70d5243970fa605683622590fb908d81e89d94bd92c0ba17059b7c01ff33606358601f116309d04716c"}) (async) 1.081914134s ago: executing program 4 (id=3035): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x101041, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x4, r2, 0x80001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e7280f2696e6b6465733d742c00"]) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000c80)={0x9, @sdr}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@hyper, 0x5}, {@host, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) r7 = socket(0x10, 0x803, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r8, &(0x7f0000003640)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, &(0x7f0000000780)={0x0, 0x2, 0x9, 0x7, 0x5, 0x6}) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/68, 0x44}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x88}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000010b, 0x2100, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xeb, 0x2) getpeername$tipc(r7, &(0x7f00000006c0)=@name, &(0x7f0000000700)=0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) 899.122255ms ago: executing program 7 (id=3036): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0xc4) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) read$nci(r1, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0xc4) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) (async) read$nci(r1, 0x0, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) 664.305725ms ago: executing program 7 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="6aa4876186098182700304b2be4cb498964234f05823810fdbea6de73ccc8df7e1131786b52598bd7f4bfd490d378ff5d875"], 0x7c}, 0x1, 0x0, 0x0, 0x400c809}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r3, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4) 509.976279ms ago: executing program 7 (id=3038): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x1, 0x4, {0x7, 0x25, 0x1, 0x83, 0x10, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x7, 0x16, {0x7, 0x25, 0x1, 0x2, 0x9, 0x101}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0xc, @string={0xc, 0x3, "7b17a4cb3b6d6700c92d"}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x90, 0x4}, {0xc, 0x90, 0x2000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8841}, 0x0) 436.530168ms ago: executing program 4 (id=3039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xb8, &(0x7f0000000380)={[{0xb1, 0x4e00, "063771994d29d420f6ba039523abccbf45b9448f31fcbc7858ee90b927d25bd816bab99549eab08fe881162c4b77a8e9f449b7fdae94c7607253067efbb172987e620b4c0c662b2f0955d6666e6edcaed6287baafbfc9ada33d3d01cd250eeb4d39896940da35c6a021bebd5897fb7384037fb1bc61dc2194e4e6429cc2d077f7d6d27c5c8a0c59043afbc63ca72bae431c3b69159b8a186814453e4cf1c6a9eb7b8b9a4ca4c7dd138322948ff0b2ee9da"}]}) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 0s ago: executing program 5 (id=3040): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x1, 0x204, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): nitialized): Registers INIT FAILED.... [ 637.926392][ T929] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 637.953287][ T929] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 637.974989][ T929] usb 8-1: USB disconnect, device number 23 [ 638.006024][ T5915] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 638.054125][ T5915] usb 6-1: device descriptor read/8, error -71 [ 638.201363][ T5915] usb usb6-port1: unable to enumerate USB device [ 638.241313][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2566'. [ 639.490951][ T5915] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 639.631031][ T5915] usb 8-1: device descriptor read/64, error -71 [ 639.873430][ T5915] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 640.001232][ T5915] usb 8-1: device descriptor read/64, error -71 [ 640.051720][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 53 seconds [ 640.051767][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 53 seconds [ 640.051799][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 53 seconds [ 640.051829][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 53 seconds [ 640.111271][ T5915] usb usb8-port1: attempt power cycle [ 640.175603][T15270] tmpfs: Bad value for 'mpol' [ 640.500909][ T5915] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 640.521443][T15280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.530301][T15280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.534444][ T5915] usb 8-1: device descriptor read/8, error -71 [ 640.681593][ T929] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 640.781143][ T5915] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 640.801581][ T5915] usb 8-1: device descriptor read/8, error -71 [ 640.835988][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.847649][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.857814][ T929] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.870752][ T929] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 640.879862][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.890742][ T929] usb 6-1: config 0 descriptor?? [ 640.911190][ T5915] usb usb8-port1: unable to enumerate USB device [ 641.114715][ T929] usbhid 6-1:0.0: can't add hid device: -71 [ 641.118368][T15278] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2577'. [ 641.122966][ T929] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 641.143865][ T929] usb 6-1: USB disconnect, device number 80 [ 641.206230][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.215248][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.223171][T15286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.232239][T15286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.794858][T15290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.806111][T15290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.920939][ T929] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 642.072944][ T929] usb 6-1: Using ep0 maxpacket: 16 [ 642.080393][ T929] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 642.091389][ T929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.101208][ T929] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 642.111227][ T929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024 [ 642.122633][ T929] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 642.132824][ T929] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 642.146964][ T929] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.156078][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 642.164749][ T929] usb 6-1: SerialNumber: syz [ 642.173347][T15288] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 642.183718][ T929] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 642.192462][ T929] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 642.375074][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 54 seconds [ 642.387794][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 54 seconds [ 642.399428][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 54 seconds [ 642.406978][ T929] usb 6-1: USB disconnect, device number 81 [ 642.410479][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 54 seconds [ 642.447788][T15296] binder: 15294:15296 ioctl c018620b 200000000280 returned -14 [ 642.959223][T15302] netlink: 'syz.5.2586': attribute type 10 has an invalid length. [ 643.079460][T15302] bond0: (slave team0): Releasing backup interface [ 643.120523][T15302] team0 (unregistering): Port device team_slave_0 removed [ 643.146949][T15302] team0 (unregistering): Port device team_slave_1 removed [ 643.157817][T15302] veth1_vlan: left allmulticast mode [ 643.198923][T15302] team0 (unregistering): Port device macvlan1 removed [ 643.261122][ T5954] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 643.292904][T15310] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2588'. [ 643.441121][ T5954] usb 6-1: device descriptor read/64, error -71 [ 643.459753][T15310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.499333][T15310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.533251][T15310] bond0 (unregistering): Released all slaves [ 643.555719][ T30] audit: type=1326 audit(1757641715.546:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.7.2591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253958eba9 code=0x0 [ 643.676304][T15321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.689564][T15321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.701155][ T5954] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 643.840905][ T5954] usb 6-1: device descriptor read/64, error -71 [ 643.952060][ T5954] usb usb6-port1: attempt power cycle [ 644.293939][ T5954] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 644.332427][ T5954] usb 6-1: device descriptor read/8, error -71 [ 644.357443][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.369893][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.392260][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.401331][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.581182][ T5954] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 644.604357][ T5954] usb 6-1: device descriptor read/8, error -71 [ 644.682901][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 55 seconds [ 644.693721][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 55 seconds [ 644.704764][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 55 seconds [ 644.715800][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 55 seconds [ 644.727056][ T5954] usb usb6-port1: unable to enumerate USB device [ 645.745057][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 645.921017][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 645.946900][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 645.971614][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 645.990857][ T10] usb 8-1: can't read configurations, error -71 [ 646.165548][T15362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.177614][T15362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.400893][ T5953] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 646.551110][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 646.558718][ T5953] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 646.567505][ T5953] usb 6-1: config 6 has no interface number 0 [ 646.574043][ T5953] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 646.585634][ T5953] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 646.597850][ T5953] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 646.611292][ T5953] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 646.620411][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.632790][ T5953] usb 6-1: Product: syz [ 646.636989][ T5953] usb 6-1: Manufacturer: syz [ 646.641709][ T5953] usb 6-1: SerialNumber: syz [ 646.654976][ T5953] hso 6-1:6.2: Failed to find INT IN ep [ 646.856574][ T929] usb 6-1: USB disconnect, device number 86 [ 647.001473][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 56 seconds [ 647.012251][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 56 seconds [ 647.023419][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 56 seconds [ 647.034458][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 56 seconds [ 647.731237][ T5929] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 647.883106][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.894435][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 647.906090][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 647.918296][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 647.929332][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 647.940355][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 647.950142][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.969934][ T5929] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 647.979078][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.988431][ T5929] usb 6-1: Product: syz [ 647.992711][ T5929] usb 6-1: Manufacturer: syz [ 647.997343][ T5929] usb 6-1: SerialNumber: syz [ 648.004228][ T5929] usb 6-1: config 0 descriptor?? [ 648.009914][T15377] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 648.022446][ T5929] ati_remote 6-1:0.0: Initializing ati_remote hardware failed. [ 648.030195][ T5929] ati_remote 6-1:0.0: probe with driver ati_remote failed with error -5 [ 648.121105][ T10] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 648.242934][ T5915] usb 6-1: USB disconnect, device number 87 [ 648.271375][ T10] usb 8-1: too many configurations: 28, using maximum allowed: 8 [ 648.280225][ T10] usb 8-1: config index 0 descriptor too short (expected 291, got 36) [ 648.289356][ T10] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 648.297913][ T10] usb 8-1: can't read configurations, error -22 [ 648.441219][ T10] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 648.592444][ T10] usb 8-1: too many configurations: 28, using maximum allowed: 8 [ 648.601614][ T10] usb 8-1: config index 0 descriptor too short (expected 291, got 36) [ 648.609791][ T10] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 648.618647][ T10] usb 8-1: can't read configurations, error -22 [ 648.625382][ T10] usb usb8-port1: attempt power cycle [ 648.970907][ T10] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 649.018062][ T10] usb 8-1: too many configurations: 28, using maximum allowed: 8 [ 649.027616][ T10] usb 8-1: config index 0 descriptor too short (expected 291, got 36) [ 649.036296][ T10] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 649.045799][ T10] usb 8-1: can't read configurations, error -22 [ 649.050901][ T5915] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 649.104084][T15391] netlink: 'syz.4.2618': attribute type 12 has an invalid length. [ 649.184991][ T10] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 649.223758][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 649.235734][ T10] usb 8-1: too many configurations: 28, using maximum allowed: 8 [ 649.256190][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 649.258734][ T10] usb 8-1: config index 0 descriptor too short (expected 291, got 36) [ 649.275457][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 649.290448][ T5915] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 649.298998][ T10] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 649.299038][ T10] usb 8-1: can't read configurations, error -22 [ 649.299563][ T10] usb usb8-port1: unable to enumerate USB device [ 649.321490][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 57 seconds [ 649.329456][ T5915] usb 6-1: Product: syz [ 649.333953][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 57 seconds [ 649.339578][ T5915] usb 6-1: Manufacturer: syz [ 649.348476][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 57 seconds [ 649.364591][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 57 seconds [ 649.387770][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2620'. [ 649.418317][ T5915] usb 6-1: SerialNumber: syz [ 649.437303][ T5915] usb 6-1: config 0 descriptor?? [ 649.453275][ T5915] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 649.657013][ T5915] gspca_zc3xx: reg_w_i err -71 [ 650.261183][ T5915] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 650.269480][ T5915] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 650.286181][ T5915] usb 6-1: USB disconnect, device number 88 [ 650.424578][T15409] binder: 15408:15409 ioctl c018620c 200000000140 returned -22 [ 650.754018][ T5915] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 650.893238][ T5915] usb 6-1: device descriptor read/64, error -71 [ 651.152831][ T5915] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 651.301028][ T5915] usb 6-1: device descriptor read/64, error -71 [ 651.385233][ T5929] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 651.411209][ T5915] usb usb6-port1: attempt power cycle [ 651.552914][ T5929] usb 8-1: unable to get BOS descriptor or descriptor too short [ 651.561697][ T5929] usb 8-1: not running at top speed; connect to a high speed hub [ 651.573899][ T5929] usb 8-1: config 8 has an invalid interface number: 11 but max is 0 [ 651.582154][ T5929] usb 8-1: config 8 has no interface number 0 [ 651.588405][ T5929] usb 8-1: config 8 interface 11 has no altsetting 0 [ 651.598634][ T5929] usb 8-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 651.607998][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.616132][ T5929] usb 8-1: Product: syz [ 651.620336][ T5929] usb 8-1: Manufacturer: syz [ 651.625029][ T5929] usb 8-1: SerialNumber: syz [ 651.661316][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 58 seconds [ 651.672123][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 58 seconds [ 651.683131][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 58 seconds [ 651.694124][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 58 seconds [ 651.750875][ T5915] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 651.771582][ T5915] usb 6-1: device descriptor read/8, error -71 [ 651.843570][ T5929] cdc_wdm 8-1:8.11: probe with driver cdc_wdm failed with error -22 [ 651.854839][ T5929] usb 8-1: USB disconnect, device number 34 [ 652.021215][ T5915] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 652.044252][ T5915] usb 6-1: device descriptor read/8, error -71 [ 652.153444][ T5915] usb usb6-port1: unable to enumerate USB device [ 652.641772][T15429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2630'. [ 652.643148][T15430] netlink: 'syz.7.2630': attribute type 10 has an invalid length. [ 652.669100][T15430] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 652.716627][T15432] cgroup: No subsys list or none specified [ 652.960903][ T5915] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 653.122989][ T5915] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 653.131538][ T5915] usb 8-1: config 0 has no interface number 0 [ 653.138747][ T5915] usb 8-1: New USB device found, idVendor=413c, idProduct=4004, bcdDevice=51.20 [ 653.147972][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.159913][ T5915] usb 8-1: config 0 descriptor?? [ 653.370144][ T5915] usb 8-1: USB disconnect, device number 35 [ 653.617727][T15441] support for cryptoloop has been removed. Use dm-crypt instead. [ 653.860892][ T5953] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 653.964315][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 59 seconds [ 653.975210][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 59 seconds [ 653.986253][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 59 seconds [ 653.999142][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 59 seconds [ 654.012016][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 654.031289][ T5953] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 654.040435][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.048653][ T5953] usb 6-1: Product: syz [ 654.053013][ T5953] usb 6-1: Manufacturer: syz [ 654.058249][ T5953] usb 6-1: SerialNumber: syz [ 656.287147][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 60 seconds [ 656.298049][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 60 seconds [ 656.309411][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 60 seconds [ 656.320828][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 60 seconds [ 656.503619][ T5953] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 656.514501][ T5953] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 656.523891][ T5953] mxuport 6-1:254.0: probe with driver mxuport failed with error -71 [ 656.535616][ T5953] usb 6-1: USB disconnect, device number 93 [ 656.980943][ T5953] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 657.130939][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 657.138251][ T5953] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 657.155703][ T5953] usb 6-1: config 0 has no interface number 0 [ 657.163714][ T5953] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.178623][ T5953] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 657.196115][ T5953] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 657.207447][ T5953] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 657.231057][ T5953] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 657.240244][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.267571][ T5953] usb 6-1: config 0 descriptor?? [ 657.285553][ T5953] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 657.352906][T15470] overlayfs: conflicting lowerdir path [ 657.580503][ T5929] usb 6-1: USB disconnect, device number 94 [ 657.594204][ T5929] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 657.661260][ T5953] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 657.820994][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 657.828943][ T5953] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 657.840373][ T5953] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 657.851141][ T5953] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.861293][ T5953] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.874322][ T5953] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.883473][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.100825][ T5953] usb 8-1: GET_CAPABILITIES returned 0 [ 658.106395][ T5953] usbtmc 8-1:16.0: can't read capabilities [ 658.175226][T15477] syzkaller0: entered promiscuous mode [ 658.181589][T15477] syzkaller0: entered allmulticast mode [ 658.191417][T15476] syzkaller0: left allmulticast mode [ 658.197357][T15476] syzkaller0: left promiscuous mode [ 658.305581][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.316230][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.335214][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.346947][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.379901][ T5955] usb 8-1: USB disconnect, device number 36 [ 658.603095][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 61 seconds [ 658.613876][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 61 seconds [ 658.624873][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 61 seconds [ 658.635834][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 61 seconds [ 659.291656][ T5955] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 659.440873][ T5955] usb 8-1: Using ep0 maxpacket: 16 [ 659.448120][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 659.461643][ T5955] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 659.470712][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.487072][ T5955] usb 8-1: config 0 descriptor?? [ 659.513187][ T5955] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input82 [ 659.708391][ T5218] bcm5974 8-1:0.0: could not read from device [ 659.754211][ T5955] bcm5974 8-1:0.0: could not read from device [ 659.803052][ T5218] bcm5974 8-1:0.0: could not read from device [ 659.871015][ T5955] input: failed to attach handler mousedev to device input82, error: -5 [ 659.889605][ T5218] bcm5974 8-1:0.0: could not read from device [ 659.893476][ T5955] usb 8-1: USB disconnect, device number 37 [ 660.179906][T15525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.189859][T15525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.225268][T15529] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 660.466910][ T5929] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 660.620909][ T5929] usb 6-1: device descriptor read/64, error -71 [ 660.672211][T15543] netlink: 'syz.7.2665': attribute type 10 has an invalid length. [ 660.680392][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.688114][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.700707][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.707971][T15543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.715554][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.722756][T15543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.726389][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 660.744211][T15543] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 660.755840][T15544] bridge_slave_1: left allmulticast mode [ 660.761911][T15544] bridge_slave_1: left promiscuous mode [ 660.767738][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.778363][T15544] bridge_slave_0: left allmulticast mode [ 660.784237][T15544] bridge_slave_0: left promiscuous mode [ 660.790001][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.817901][T15544] bond0: (slave bridge0): Releasing backup interface [ 660.860989][ T5929] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 660.926527][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 62 seconds [ 660.938192][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 62 seconds [ 660.949173][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 62 seconds [ 660.960484][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 62 seconds [ 661.009751][T15546] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2666'. [ 661.041014][ T5929] usb 6-1: device descriptor read/64, error -71 [ 661.154591][ T5929] usb usb6-port1: attempt power cycle [ 661.290863][ T929] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 661.420876][ T929] usb 8-1: device descriptor read/64, error -71 [ 661.500927][ T5929] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 661.522271][ T5929] usb 6-1: device descriptor read/8, error -71 [ 661.660892][ T929] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 661.760974][ T5929] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 661.781439][ T5929] usb 6-1: device descriptor read/8, error -71 [ 661.801135][ T929] usb 8-1: device descriptor read/64, error -71 [ 661.891701][ T5929] usb usb6-port1: unable to enumerate USB device [ 661.912056][ T929] usb usb8-port1: attempt power cycle [ 662.250945][ T929] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 662.272083][ T929] usb 8-1: device descriptor read/8, error -71 [ 662.360932][T13786] Bluetooth: hci3: command 0x0406 tx timeout [ 662.521350][ T929] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 662.551570][ T929] usb 8-1: device descriptor read/8, error -71 [ 662.671241][ T929] usb usb8-port1: unable to enumerate USB device [ 663.241742][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 63 seconds [ 663.252596][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 63 seconds [ 663.264812][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 63 seconds [ 663.276557][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 63 seconds [ 663.625072][T15561] serio: Serial port ptm0 [ 663.923787][T15571] syzkaller1: entered promiscuous mode [ 663.929387][T15571] syzkaller1: entered allmulticast mode [ 664.143716][T15584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.156954][T15584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.239283][T15589] overlayfs: failed to resolve 'context=system_u': -2 [ 664.660941][ T5929] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 664.801095][ T5929] usb 8-1: device descriptor read/64, error -71 [ 665.041807][ T5929] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 665.171810][ T5929] usb 8-1: device descriptor read/64, error -71 [ 665.292405][ T5929] usb usb8-port1: attempt power cycle [ 665.310957][ T10] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 665.460899][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 665.467851][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.478106][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.489081][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 665.499535][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 665.509324][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.523581][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.533381][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.541452][ T10] usb 6-1: Manufacturer: syz [ 665.547970][ T10] usb 6-1: config 0 descriptor?? [ 665.571435][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 64 seconds [ 665.582249][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 64 seconds [ 665.593607][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 64 seconds [ 665.604604][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 64 seconds [ 665.630978][ T5929] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 665.651612][ T5929] usb 8-1: device descriptor read/8, error -71 [ 665.821223][ T10] rc_core: IR keymap rc-hauppauge not found [ 665.827376][ T10] Registered IR keymap rc-empty [ 665.833642][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 665.871178][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 665.892019][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 665.903829][ T5929] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 665.913778][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 665.928643][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 665.951051][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 665.958829][ T5929] usb 8-1: device descriptor read/8, error -71 [ 665.982237][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.001013][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.021042][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.051896][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.081446][ T5929] usb usb8-port1: unable to enumerate USB device [ 666.092809][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.125128][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.166168][ T5929] usb 7-1: USB disconnect, device number 24 [ 666.173926][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.226751][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 666.256610][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 666.274467][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.455673][T13786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 666.466497][T13786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 666.476198][T13786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 666.485279][T13786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 666.493191][T13786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.006082][T15629] chnl_net:caif_netlink_parms(): no params data found [ 667.177818][T15629] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.185238][T15629] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.193145][T15629] bridge_slave_0: entered allmulticast mode [ 667.201609][T15629] bridge_slave_0: entered promiscuous mode [ 667.210077][T15629] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.217465][T15629] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.225362][T15629] bridge_slave_1: entered allmulticast mode [ 667.233457][T15629] bridge_slave_1: entered promiscuous mode [ 667.281984][T15629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.295617][T15629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.346620][T15629] team0: Port device team_slave_0 added [ 667.357599][T15629] team0: Port device team_slave_1 added [ 667.399289][T15629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.406554][T15629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.432609][T15629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.445426][T15629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.452978][T15629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.493889][T15629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.604454][T15629] hsr_slave_0: entered promiscuous mode [ 667.618996][T15629] hsr_slave_1: entered promiscuous mode [ 667.626402][T15629] debugfs: 'hsr0' already exists in 'hsr' [ 667.633337][T15629] Cannot create hsr debugfs directory [ 667.850883][ T5955] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 667.864976][T15629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 667.877346][T15629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 667.881146][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 65 seconds [ 667.895084][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 65 seconds [ 667.906513][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 65 seconds [ 667.910365][T15629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 667.917518][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 65 seconds [ 667.941004][T15629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 668.013761][ T5955] usb 8-1: config 0 has an invalid interface number: 63 but max is 0 [ 668.023221][ T5955] usb 8-1: config 0 has no interface number 0 [ 668.029348][ T5955] usb 8-1: config 0 interface 63 has no altsetting 0 [ 668.046033][ T5955] usb 8-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=2b.5e [ 668.055511][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.063989][ T5955] usb 8-1: Product: syz [ 668.075514][ T5955] usb 8-1: Manufacturer: syz [ 668.090509][ T5955] usb 8-1: SerialNumber: syz [ 668.104434][ T5955] usb 8-1: config 0 descriptor?? [ 668.117809][ T929] usb 6-1: USB disconnect, device number 99 [ 668.129938][T15629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.159313][ T5955] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 668.176654][T15629] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.179590][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 668.203994][ T5955] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 668.210539][T13492] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.220118][T13492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.221415][ T5955] usb 8-1: media controller created [ 668.242005][T13496] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.249193][T13496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.286112][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.317578][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 668.332564][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 668.349022][ T5955] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 668.492380][ T5955] rc_core: IR keymap rc-avermedia-m135a not found [ 668.513565][ T5955] Registered IR keymap rc-empty [ 668.520269][ T5955] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 668.532356][T13786] Bluetooth: hci5: command tx timeout [ 668.549931][ T5955] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input84 [ 668.574301][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 668.598661][ T5955] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 668.644279][ T5955] usb 8-1: USB disconnect, device number 46 [ 668.760069][ T5955] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 668.863666][T15629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.051753][ T44] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 669.123557][T15629] veth0_vlan: entered promiscuous mode [ 669.138465][T15629] veth1_vlan: entered promiscuous mode [ 669.174423][T15629] veth0_macvtap: entered promiscuous mode [ 669.184392][T15629] veth1_macvtap: entered promiscuous mode [ 669.191170][ T5955] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 669.211761][T15629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.226183][T15629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.236631][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 669.246589][T13498] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.252305][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.265337][T13498] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.277613][ T44] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 669.287407][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.289379][T13498] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.305279][ T44] usb 6-1: config 0 descriptor?? [ 669.330403][T13492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.341372][ T5955] usb 8-1: device descriptor read/64, error -71 [ 669.411308][T13498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.430610][T13498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.465592][T13489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.474101][T13489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.581075][ T5955] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 669.649913][T15683] mac80211_hwsim hwsim26 4: renamed from wlan1 (while UP) [ 669.740956][ T5955] usb 8-1: device descriptor read/64, error -71 [ 669.757733][ T44] glorious 0003:258A:0036.0035: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 669.871307][ T5955] usb usb8-port1: attempt power cycle [ 669.941545][ T10] usb 6-1: USB disconnect, device number 100 [ 670.003146][ T3471] Bluetooth: hci6: Frame reassembly failed (-84) [ 670.072551][T15691] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 670.075569][T15690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 670.087577][T15690] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 670.094497][T15693] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 670.104883][T15690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 670.111064][T15690] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 670.131250][T15690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 670.144358][T15690] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 670.167505][T15690] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 670.181375][T15690] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 670.187507][T15690] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 670.199731][T15690] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 670.207978][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 66 seconds [ 670.218980][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 66 seconds [ 670.221050][ T5955] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 670.231573][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 66 seconds [ 670.249774][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 66 seconds [ 670.326895][ T5955] usb 8-1: device descriptor read/8, error -71 [ 670.480615][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.495649][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.509198][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.539095][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.550084][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.564440][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.574850][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.582878][ T5955] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 670.607706][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.625250][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.635480][ T44] hid-generic 0000:007F:FFFFFFFE.0036: unknown main item tag 0x0 [ 670.649851][ T5955] usb 8-1: device descriptor read/8, error -71 [ 670.666997][ T44] hid-generic 0000:007F:FFFFFFFE.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 670.764996][ T5955] usb usb8-port1: unable to enumerate USB device [ 670.830049][T15712] fido_id[15712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 671.261536][ T44] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 671.429101][ T44] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 671.437469][ T44] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 671.453605][ T44] usb 6-1: config 0 has no interface number 0 [ 671.459920][ T44] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 671.480093][ T44] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65522, setting to 64 [ 671.491993][ T44] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.506212][ T44] usb 6-1: config 0 interface 52 has no altsetting 0 [ 671.515286][ T44] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 671.524910][ T44] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 671.533313][ T44] usb 6-1: Manufacturer: syz [ 671.542792][ T44] usb 6-1: config 0 descriptor?? [ 671.555590][ T44] hub 6-1:0.52: bad descriptor, ignoring hub [ 671.562001][ T44] hub 6-1:0.52: probe with driver hub failed with error -5 [ 671.782598][ T44] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input85 [ 671.949257][T15747] netlink: 'syz.4.2716': attribute type 9 has an invalid length. [ 672.041356][ T5864] Bluetooth: hci6: command 0x1003 tx timeout [ 672.041762][T13786] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 672.111490][ T5915] usb 6-1: USB disconnect, device number 101 [ 672.120898][T13786] Bluetooth: hci3: command 0x0406 tx timeout [ 672.121017][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 672.200882][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 672.206993][T13786] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.521366][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 67 seconds [ 672.532312][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 67 seconds [ 672.543551][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 67 seconds [ 672.554757][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 67 seconds [ 673.048791][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 673.088444][T15780] bridge0: entered allmulticast mode [ 673.124186][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2723'. [ 673.160577][T15780] bridge_slave_1: left allmulticast mode [ 673.191731][T15780] bridge_slave_1: left promiscuous mode [ 673.213919][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.262744][T15780] bridge_slave_0: left allmulticast mode [ 673.287749][T15780] bridge_slave_0: left promiscuous mode [ 673.310513][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.411600][T15679] usb 8-1: new low-speed USB device number 51 using dummy_hcd [ 673.472880][T15780] bridge0 (unregistering): left allmulticast mode [ 673.611882][T15679] usb 8-1: Invalid ep0 maxpacket: 16 [ 673.665390][T15757] fuse: Bad value for 'fd' [ 673.760823][T15679] usb 8-1: new low-speed USB device number 52 using dummy_hcd [ 673.932568][T15679] usb 8-1: Invalid ep0 maxpacket: 16 [ 673.938388][T15679] usb usb8-port1: attempt power cycle [ 674.204067][T13786] Bluetooth: hci3: command 0x0406 tx timeout [ 674.204076][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 674.287573][T13786] Bluetooth: hci4: command 0x0c1a tx timeout [ 674.287616][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 674.301027][T15679] usb 8-1: new low-speed USB device number 53 using dummy_hcd [ 674.333663][T15679] usb 8-1: Invalid ep0 maxpacket: 16 [ 674.364929][T15624] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 674.460972][T15679] usb 8-1: new low-speed USB device number 54 using dummy_hcd [ 674.481581][T15679] usb 8-1: Invalid ep0 maxpacket: 16 [ 674.488529][T15679] usb usb8-port1: unable to enumerate USB device [ 674.536942][T15624] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 674.549231][T15624] usb 6-1: config 0 has no interface number 0 [ 674.558478][T15624] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 674.567839][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.576342][T15624] usb 6-1: Product: syz [ 674.580673][T15624] usb 6-1: Manufacturer: syz [ 674.585838][T15624] usb 6-1: SerialNumber: syz [ 674.603008][T15624] usb 6-1: config 0 descriptor?? [ 674.825981][T15624] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 674.847139][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 68 seconds [ 674.858237][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 68 seconds [ 674.869478][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 68 seconds [ 674.880653][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 68 seconds [ 674.899792][T15624] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 674.915128][T15624] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 674.924338][T15624] usb 6-1: media controller created [ 674.953577][T15624] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.028410][T15624] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 675.133943][T15624] usb 6-1: USB disconnect, device number 102 [ 675.820924][T15679] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 675.978969][T15679] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 675.988197][T15679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.996460][T15679] usb 6-1: Product: syz [ 676.000654][T15679] usb 6-1: Manufacturer: syz [ 676.005406][T15679] usb 6-1: SerialNumber: syz [ 676.012800][T15679] usb 6-1: config 0 descriptor?? [ 676.239351][T15679] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 676.361181][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 676.367275][ T5864] Bluetooth: hci4: command 0x0c1a tx timeout [ 676.552688][ T10] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 676.638206][T15847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.647324][T15847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.712942][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.725263][ T10] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 676.734397][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.744972][ T10] usb 8-1: config 0 descriptor?? [ 676.857833][T15679] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 677.162470][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 69 seconds [ 677.174342][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 69 seconds [ 677.185462][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 69 seconds [ 677.196412][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 69 seconds [ 677.362664][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 677.368853][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 677.382038][ T10] usb 8-1: USB disconnect, device number 55 [ 677.574338][T15858] (syz.5.2734,15858,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 677.583566][T15858] (syz.5.2734,15858,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 677.906959][T15860] binder: 15859:15860 ioctl c018620c 200000000280 returned -1 [ 678.250940][ T5915] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 678.355729][T15867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.369642][T15867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.406612][ T5915] usb 8-1: unable to get BOS descriptor or descriptor too short [ 678.437983][ T5915] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 678.445932][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 678.457544][ T5915] usb 8-1: can't read configurations, error -71 [ 678.630351][T15679] usb 6-1: USB disconnect, device number 103 [ 679.071220][T15679] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 679.244577][T15679] usb 6-1: unable to get BOS descriptor or descriptor too short [ 679.263350][T15679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 679.277622][T15679] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 679.297841][T15679] usb 6-1: config 1 interface 0 has no altsetting 1 [ 679.308769][T15679] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 679.326634][T15679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.336916][T15679] usb 6-1: Product: syz [ 679.346025][T15679] usb 6-1: Manufacturer: syz [ 679.352502][T15679] usb 6-1: SerialNumber: syz [ 679.368740][T15679] smsusb:smsusb_probe: board id=8, interface number 0 [ 679.483241][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 70 seconds [ 679.494194][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 70 seconds [ 679.505133][ T5915] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 679.515924][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 70 seconds [ 679.527000][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 70 seconds [ 679.568937][T15679] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 679.605873][T15679] smsusb 6-1:1.0: probe with driver smsusb failed with error -71 [ 679.660387][T15679] usb 6-1: USB disconnect, device number 104 [ 679.678035][ T5915] usb 8-1: config 0 has no interfaces? [ 679.688671][T15915] overlayfs: conflicting lowerdir path [ 679.705082][ T5915] usb 8-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 679.740695][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.759497][ T5915] usb 8-1: SerialNumber: syz [ 679.780312][ T5915] usb 8-1: config 0 descriptor?? [ 680.013366][T15895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.022409][T15895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.075115][ T1209] usb 8-1: USB disconnect, device number 57 [ 680.457447][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2755'. [ 680.466568][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2755'. [ 680.537121][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 680.776924][ T30] audit: type=1800 audit(1757641752.766:1319): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2759" name="bus" dev="tmpfs" ino=1374 res=0 errno=0 [ 680.831678][ T10] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 680.948617][T15958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2762'. [ 680.991037][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 680.999053][ T10] usb 6-1: config 0 has an invalid interface number: 94 but max is 0 [ 681.008252][ T10] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 681.019048][ T10] usb 6-1: config 0 has no interface number 0 [ 681.029555][ T10] usb 6-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 681.047705][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.056651][ T10] usb 6-1: Product: syz [ 681.061150][ T10] usb 6-1: Manufacturer: syz [ 681.065842][ T10] usb 6-1: SerialNumber: syz [ 681.074363][ T10] usb 6-1: config 0 descriptor?? [ 681.082794][ T10] usb 6-1: unsupported MDLM descriptors [ 681.283517][T15943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.292610][T15943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.303069][T15943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.311937][T15943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.460401][ T44] usb 6-1: USB disconnect, device number 105 [ 681.569302][ T30] audit: type=1326 audit(1757641753.556:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.7.2764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253958eba9 code=0x0 [ 681.805160][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 71 seconds [ 681.816771][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 71 seconds [ 681.828275][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 71 seconds [ 681.839490][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 71 seconds [ 682.221957][T15679] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 682.395771][T15679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.406112][T15679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 682.415552][T15679] usb 6-1: config 1 has no interface number 0 [ 682.423782][T15679] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.435846][T15679] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 682.445353][T15679] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 682.463108][T15679] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.476750][T15679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.486111][T15679] usb 6-1: Product: syz [ 682.490308][T15679] usb 6-1: Manufacturer: syz [ 682.500500][T15679] usb 6-1: SerialNumber: syz [ 682.725086][ T30] audit: type=1326 audit(1757641754.716:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.8.2772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7a8f8eba9 code=0x0 [ 682.868029][T15998] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2774'. [ 683.121053][ T10] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 683.122401][T15679] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 683.135737][T15679] cdc_ncm 6-1:1.1: bind() failure [ 683.150291][T15679] usb 6-1: USB disconnect, device number 106 [ 683.260882][ T10] usb 8-1: device descriptor read/64, error -71 [ 683.510965][ T10] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 683.650915][ T10] usb 8-1: device descriptor read/64, error -71 [ 683.692988][T16001] program syz.5.2775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.761820][ T10] usb usb8-port1: attempt power cycle [ 684.060865][T15679] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 684.100849][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 684.121575][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 72 seconds [ 684.132566][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 72 seconds [ 684.143556][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 72 seconds [ 684.154519][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 72 seconds [ 684.166478][ T10] usb 8-1: device descriptor read/8, error -71 [ 684.201202][T15679] usb 6-1: device descriptor read/64, error -71 [ 684.410882][ T10] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 684.431537][ T10] usb 8-1: device descriptor read/8, error -71 [ 684.451155][T15679] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 684.541172][ T10] usb usb8-port1: unable to enumerate USB device [ 684.580914][T15679] usb 6-1: device descriptor read/64, error -71 [ 684.693512][T15679] usb usb6-port1: attempt power cycle [ 685.030911][T15679] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 685.051378][T15679] usb 6-1: device descriptor read/8, error -71 [ 685.300936][T15679] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 685.332366][T15679] usb 6-1: device descriptor read/8, error -71 [ 685.452631][T15679] usb usb6-port1: unable to enumerate USB device [ 686.173158][T16029] Bluetooth: MGMT ver 1.23 [ 686.341298][ T10] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 686.460993][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 73 seconds [ 686.471789][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 73 seconds [ 686.482847][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 73 seconds [ 686.493947][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 73 seconds [ 686.504987][ T10] usb 8-1: device descriptor read/64, error -71 [ 686.595188][ T30] audit: type=1326 audit(1757641758.586:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.624189][ T30] audit: type=1326 audit(1757641758.586:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.646675][ T30] audit: type=1326 audit(1757641758.586:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.669167][ T30] audit: type=1326 audit(1757641758.586:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.692563][ T30] audit: type=1326 audit(1757641758.586:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.716156][ T30] audit: type=1326 audit(1757641758.586:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.739676][ T30] audit: type=1326 audit(1757641758.586:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.762497][ T30] audit: type=1326 audit(1757641758.586:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.771273][ T10] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 686.793197][ T30] audit: type=1326 audit(1757641758.586:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.839339][ T30] audit: type=1326 audit(1757641758.586:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a8f8eba9 code=0x50000 [ 686.960933][ T10] usb 8-1: device descriptor read/64, error -71 [ 687.071647][ T10] usb usb8-port1: attempt power cycle [ 687.442695][ T10] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 687.497783][ T10] usb 8-1: device descriptor read/8, error -71 [ 687.771861][ T10] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 687.806738][ T10] usb 8-1: device descriptor read/8, error -71 [ 687.911094][ T1209] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 687.921565][ T10] usb usb8-port1: unable to enumerate USB device [ 688.081203][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 688.088373][ T1209] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 688.096859][ T1209] usb 6-1: config 0 has no interface number 0 [ 688.103055][ T1209] usb 6-1: config 0 interface 12 has no altsetting 0 [ 688.112377][ T1209] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 688.121681][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.129685][ T1209] usb 6-1: Product: syz [ 688.134107][ T1209] usb 6-1: Manufacturer: syz [ 688.138757][ T1209] usb 6-1: SerialNumber: syz [ 688.146256][ T1209] usb 6-1: config 0 descriptor?? [ 688.567169][ T1209] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 688.592624][ T1209] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 688.600006][ T1209] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 688.619940][ T1209] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 688.636655][ T1209] usb 6-1: USB disconnect, device number 111 [ 688.764576][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 74 seconds [ 688.777009][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 74 seconds [ 688.788265][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 74 seconds [ 688.793909][T16075] netlink: 'syz.5.2799': attribute type 10 has an invalid length. [ 688.799273][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 74 seconds [ 688.824744][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.833008][T16075] bridge_slave_1: left allmulticast mode [ 688.838684][T16075] bridge_slave_1: left promiscuous mode [ 688.844980][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.867043][T16075] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 689.136069][T16080] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2800'. [ 689.155326][ T5955] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 689.310984][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 689.333157][ T5955] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 689.356240][ T5955] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.375411][ T5955] usb 6-1: config 0 has no interface number 0 [ 689.393729][ T5955] usb 6-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=ce.6f [ 689.404726][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.413296][ T5955] usb 6-1: Product: syz [ 689.417633][ T5955] usb 6-1: Manufacturer: syz [ 689.422483][ T5955] usb 6-1: SerialNumber: syz [ 689.437244][ T5955] usb 6-1: config 0 descriptor?? [ 689.449997][ T5955] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 689.692044][T16075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 689.705671][T16075] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 689.717925][T16075] netlink: 'syz.5.2799': attribute type 21 has an invalid length. [ 689.727896][T16075] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2799'. [ 689.742574][T16075] netlink: 'syz.5.2799': attribute type 5 has an invalid length. [ 689.750503][T16075] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2799'. [ 689.795015][T16075] syzkaller1: entered promiscuous mode [ 689.800543][T16075] syzkaller1: entered allmulticast mode [ 689.830222][ T5955] usb 6-1: qt2_attach - failed to power on unit: -71 [ 689.853545][ T5955] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 689.900901][ T5955] usb 6-1: USB disconnect, device number 112 [ 690.230929][ T1209] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 690.384209][ T1209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.396491][ T1209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.407937][ T1209] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 690.417711][ T1209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.429753][ T1209] usb 8-1: config 0 descriptor?? [ 690.721005][ T1209] usbhid 8-1:0.0: can't add hid device: -71 [ 690.727061][ T1209] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 690.738761][ T1209] usb 8-1: USB disconnect, device number 67 [ 691.004798][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.011542][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.081180][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 75 seconds [ 691.091980][ T1209] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 691.099871][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 75 seconds [ 691.110990][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 75 seconds [ 691.122008][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 75 seconds [ 691.130883][ T5955] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 691.283610][ T1209] usb 8-1: not running at top speed; connect to a high speed hub [ 691.292713][ T1209] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 691.300917][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 691.303774][ T1209] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.320201][ T1209] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.330836][ T1209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.338868][ T1209] usb 8-1: Product: Ч [ 691.343781][ T1209] usb 8-1: Manufacturer: Ñ„ [ 691.348572][ T1209] usb 8-1: SerialNumber: syz [ 691.353827][ T5955] usb 6-1: config 3 has an invalid interface number: 136 but max is 0 [ 691.364513][ T5955] usb 6-1: config 3 has no interface number 0 [ 691.370637][ T5955] usb 6-1: config 3 interface 136 has no altsetting 0 [ 691.379855][ T5955] usb 6-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice=d6.8f [ 691.389362][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.397652][ T5955] usb 6-1: Product: syz [ 691.402974][ T5955] usb 6-1: Manufacturer: syz [ 691.407688][ T5955] usb 6-1: SerialNumber: syz [ 691.583516][ T1209] usb 8-1: 0:2 : does not exist [ 691.601772][ T1209] usb 8-1: USB disconnect, device number 68 [ 691.631305][ T5955] usb-storage 6-1:3.136: USB Mass Storage device detected [ 691.655153][T13699] udevd[13699]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.725293][ T5955] usb 6-1: USB disconnect, device number 113 [ 692.458148][T16156] netlink: 'syz.7.2823': attribute type 10 has an invalid length. [ 692.478867][T16156] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.488751][T16156] bond0: (slave team0): Enslaving as an active interface with an up link [ 692.731020][ T5955] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 692.738806][ T44] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 692.891097][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 692.899257][ T5955] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.909750][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 692.921877][ T44] usb 6-1: descriptor type invalid, skip [ 692.927652][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 692.937464][ T44] usb 6-1: descriptor type invalid, skip [ 692.944094][ T44] usb 6-1: descriptor type invalid, skip [ 692.949740][ T44] usb 6-1: descriptor type invalid, skip [ 692.955475][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 692.971463][ T44] usb 6-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 692.981759][ T44] usb 6-1: config 1 interface 0 has no altsetting 0 [ 692.988803][ T5955] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 693.001567][ T5955] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 693.010107][ T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 693.019778][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.028109][ T5955] usb 8-1: Manufacturer: syz [ 693.033604][ T44] usb 6-1: Product: syz [ 693.040676][ T5955] usb 8-1: config 0 descriptor?? [ 693.045942][ T44] usb 6-1: Manufacturer: syz [ 693.051546][ T44] usb 6-1: SerialNumber: syz [ 693.076073][T16158] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 693.314433][ T44] usb 6-1: USB disconnect, device number 114 [ 693.341227][ T5955] rc_core: IR keymap rc-hauppauge not found [ 693.347377][ T5955] Registered IR keymap rc-empty [ 693.355170][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.381017][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.401316][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 76 seconds [ 693.402949][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 693.412405][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 76 seconds [ 693.434635][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 76 seconds [ 693.445706][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 76 seconds [ 693.453344][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input87 [ 693.473210][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.513483][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.531137][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.551099][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.571064][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.590923][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.610905][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.631149][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.653537][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.686480][ T5955] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 693.714746][ T5955] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 693.725241][ T5955] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 693.993649][ T5955] usb 8-1: USB disconnect, device number 69 [ 694.038412][T16174] overlay: ./file0 is not a directory [ 694.402301][ T1209] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 694.574076][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 694.590706][ T1209] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 694.600253][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.631099][ T1209] usb 6-1: config 0 descriptor?? [ 694.637417][T16178] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 694.816071][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2835'. [ 695.070861][ T10] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 695.079564][T16178] binder: 16177:16178 ioctl 80189439 200000000040 returned -22 [ 695.093064][ T1209] hid_parser_main: 33 callbacks suppressed [ 695.093088][ T1209] ryos 0003:1E7D:3138.0037: unknown main item tag 0x4 [ 695.110551][ T1209] ryos 0003:1E7D:3138.0037: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 695.230917][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 695.243051][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 695.250893][ T10] usb 8-1: too many configurations: 159, using maximum allowed: 8 [ 695.261582][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 695.269319][ T10] usb 8-1: can't read configurations, error -61 [ 695.291543][ T5955] usb 6-1: USB disconnect, device number 115 [ 695.400923][ T10] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 695.550971][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 695.558286][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 695.567193][ T10] usb 8-1: too many configurations: 159, using maximum allowed: 8 [ 695.577203][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 695.585186][ T10] usb 8-1: can't read configurations, error -61 [ 695.592296][ T10] usb usb8-port1: attempt power cycle [ 695.721176][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 77 seconds [ 695.733369][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 77 seconds [ 695.744375][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 77 seconds [ 695.755388][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 77 seconds [ 695.950932][ T10] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 695.971571][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 695.979423][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 695.989386][ T10] usb 8-1: too many configurations: 159, using maximum allowed: 8 [ 695.999402][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 696.008365][ T10] usb 8-1: can't read configurations, error -61 [ 696.037441][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2837'. [ 696.151582][ T10] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 696.191805][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 696.199333][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 696.207667][ T10] usb 8-1: too many configurations: 159, using maximum allowed: 8 [ 696.219138][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 696.226829][ T10] usb 8-1: can't read configurations, error -61 [ 696.233724][ T10] usb usb8-port1: unable to enumerate USB device [ 696.420924][T15624] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 696.571123][T15624] usb 6-1: Using ep0 maxpacket: 8 [ 696.580382][T15624] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.597017][T15624] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.614997][T15624] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.628946][T15624] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.646485][T15624] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.656544][T15624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.882143][T15624] usb 6-1: GET_CAPABILITIES returned 59 [ 696.887835][T15624] usbtmc 6-1:16.0: can't read capabilities [ 697.439706][T16234] netlink: 'syz.5.2839': attribute type 5 has an invalid length. [ 697.447920][T16234] netlink: 'syz.5.2839': attribute type 25 has an invalid length. [ 697.459590][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.468742][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.477854][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.490247][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.499384][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.508534][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.517631][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.529087][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.538191][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.547280][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.556928][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.566046][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.575158][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.584232][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.594286][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.603880][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.957236][T16252] 9pnet_fd: Insufficient options for proto=fd [ 698.044781][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 78 seconds [ 698.055959][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 78 seconds [ 698.070373][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 78 seconds [ 698.081367][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 78 seconds [ 698.330897][T16261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.188089][T15624] usb 6-1: USB disconnect, device number 116 [ 699.234487][T16270] netlink: 'syz.5.2856': attribute type 21 has an invalid length. [ 699.376545][T16277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2857'. [ 699.829613][ T24] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 699.902243][T16292] netlink: 5820 bytes leftover after parsing attributes in process `syz.4.2863'. [ 699.918157][T16292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 699.924695][T16292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.934011][T16292] vhci_hcd vhci_hcd.0: Device attached [ 699.959689][ T24] usb 6-1: device descriptor read/64, error -71 [ 700.007747][T16293] vhci_hcd: connection closed [ 700.008370][ T3471] vhci_hcd: stop threads [ 700.042860][ T3471] vhci_hcd: release socket [ 700.054211][ T3471] vhci_hcd: disconnect device [ 700.119523][T15624] vhci_hcd: vhci_device speed not set [ 700.209531][ T24] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 700.349187][ T24] usb 6-1: device descriptor read/64, error -71 [ 700.372771][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 79 seconds [ 700.383508][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 79 seconds [ 700.394485][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 79 seconds [ 700.405645][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 79 seconds [ 700.459595][ T24] usb usb6-port1: attempt power cycle [ 700.808997][ T24] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 700.839722][ T24] usb 6-1: device descriptor read/8, error -71 [ 701.079026][ T24] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 701.101022][ T24] usb 6-1: device descriptor read/8, error -71 [ 701.219609][ T24] usb usb6-port1: unable to enumerate USB device [ 701.253549][T16312] netlink: 'syz.7.2867': attribute type 21 has an invalid length. [ 701.263343][T16312] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2867'. [ 702.689843][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 80 seconds [ 702.701481][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 80 seconds [ 702.714904][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 80 seconds [ 702.726206][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 80 seconds [ 702.840502][T16331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.850075][T16332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.860311][T16331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.870759][T16332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.991630][T16339] : renamed from bridge_slave_0 (while UP) [ 703.160341][T16347] JFS: charset not found [ 703.258382][ T24] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 703.467673][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 703.494872][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.524065][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.537616][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.549623][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.560038][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 703.569658][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.584213][ T24] usb 6-1: config 0 descriptor?? [ 703.670790][T16379] block nbd7: Attempted send on invalid socket [ 703.677028][T16379] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 703.687026][T16379] XFS (nbd7): SB validate failed with error -5. [ 703.967417][ T5929] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 703.994008][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 704.003263][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 704.013894][ T24] usb 6-1: USB disconnect, device number 121 [ 704.123067][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 704.135259][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 704.146457][ T5929] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 704.155556][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.166444][ T5929] usb 8-1: config 0 descriptor?? [ 704.377530][ T5929] ath6kl: Failed to submit usb control message: -71 [ 704.384390][ T5929] ath6kl: unable to send the bmi data to the device: -71 [ 704.384428][ T5929] ath6kl: Unable to send get target info: -71 [ 704.385375][ T5929] ath6kl: Failed to init ath6kl core: -71 [ 704.386741][ T5929] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 704.391724][ T5929] usb 8-1: USB disconnect, device number 74 [ 704.557114][T16388] tmpfs: Group quota inode hardlimit too large. [ 704.837360][ T5929] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 704.969785][T16393] unknown channel width for channel at 909000KHz? [ 704.976370][T16393] unknown channel width for channel at 909000KHz? [ 704.983227][T16393] unknown channel width for channel at 909000KHz? [ 704.987073][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 705.002968][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 81 seconds [ 705.014051][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 81 seconds [ 705.025235][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 81 seconds [ 705.036237][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 81 seconds [ 705.048812][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.059880][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.069779][ T5929] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 705.079480][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.090449][ T5929] usb 6-1: config 0 descriptor?? [ 705.310162][T16390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.323187][T16390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.539034][ T5929] uclogic 0003:5543:0004.0038: item fetching failed at offset 3/5 [ 705.548300][ T5929] uclogic 0003:5543:0004.0038: parse failed [ 705.554272][ T5929] uclogic 0003:5543:0004.0038: probe with driver uclogic failed with error -22 [ 705.740459][T16409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.752716][T16409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.753667][T16390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.770870][T16390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.797299][T15679] usb 6-1: USB disconnect, device number 122 [ 705.811825][ T24] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 705.984463][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 705.994600][ T24] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 706.014969][ T24] usb 8-1: config 1 has no interface number 1 [ 706.022576][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 706.043158][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.055379][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.071144][ T24] usb 8-1: Product: syz [ 706.075370][ T24] usb 8-1: Manufacturer: syz [ 706.084798][ T24] usb 8-1: SerialNumber: syz [ 706.104345][T16422] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 706.159257][ T30] kauditd_printk_skb: 2650 callbacks suppressed [ 706.159276][ T30] audit: type=1326 audit(6049044077.151:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.5.2895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f8a58eba9 code=0x0 [ 706.304884][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.318455][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.335880][ T24] usb 8-1: found format II with max.bitrate = 26774, frame size=2 [ 706.344767][ T24] usb 8-1: found format II with max.bitrate = 26774, frame size=2 [ 706.355106][ T24] usb 8-1: failed to enable PITCH for EP 0x82 [ 706.387429][ T24] usb 8-1: USB disconnect, device number 75 [ 707.116520][T15624] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 707.275742][T15624] usb 8-1: Using ep0 maxpacket: 8 [ 707.283115][T15624] usb 8-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 707.294679][T15624] usb 8-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 707.308927][T15624] usb 8-1: config 0 interface 0 has no altsetting 0 [ 707.321312][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 82 seconds [ 707.332230][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 82 seconds [ 707.343334][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 82 seconds [ 707.354441][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 82 seconds [ 707.365783][T15624] usb 8-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 707.374849][T15624] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.385961][T15624] usb 8-1: config 0 descriptor?? [ 707.725624][ T44] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 707.799327][T16440] delete_channel: no stack [ 707.803892][T16440] delete_channel: no stack [ 707.821162][T15624] elecom 0003:056E:011C.0039: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.7-1/input0 [ 707.900568][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 707.907501][ T44] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.920449][ T44] usb 6-1: config 0 has no interface number 0 [ 707.929376][ T44] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 707.938502][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.946885][ T44] usb 6-1: Product: syz [ 707.951062][ T44] usb 6-1: Manufacturer: syz [ 707.955999][ T44] usb 6-1: SerialNumber: syz [ 707.962801][ T44] usb 6-1: config 0 descriptor?? [ 707.970990][ T44] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 707.980083][ T44] usb 6-1: selecting invalid altsetting 1 [ 707.986497][ T44] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 707.996778][ T44] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.007265][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 708.018130][ T44] usb 6-1: media controller created [ 708.020924][T15624] usb 8-1: USB disconnect, device number 76 [ 708.046089][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.171091][ T44] usb 6-1: DVB: registering adapter 3 frontend 0 (Zarlink ZL10353 DVB-T)... [ 708.182875][ T44] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 708.227576][ T44] DVB: Unable to find symbol mxl5005s_attach() [ 708.371398][ T44] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 708.406063][ T44] usb 6-1: USB disconnect, device number 123 [ 708.633605][T16465] syzkaller1: entered promiscuous mode [ 708.639229][T16465] syzkaller1: entered allmulticast mode [ 708.894919][ T44] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 709.066798][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 709.082191][ T44] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 709.089959][ T44] usb 8-1: can't read configurations, error -61 [ 709.165023][ T5929] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 709.224808][ T44] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 709.314950][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 709.325673][ T5929] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 709.333877][ T5929] usb 6-1: config 0 has no interface number 0 [ 709.342780][ T5929] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 709.352863][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.360978][ T5929] usb 6-1: Product: syz [ 709.365202][ T5929] usb 6-1: Manufacturer: syz [ 709.369815][ T5929] usb 6-1: SerialNumber: syz [ 709.379254][ T5929] usb 6-1: config 0 descriptor?? [ 709.383710][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 709.400958][ T44] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 709.409487][ T44] usb 8-1: can't read configurations, error -61 [ 709.420608][ T44] usb usb8-port1: attempt power cycle [ 709.599805][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.608992][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.623640][ T5929] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 709.635145][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 83 seconds [ 709.646174][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 83 seconds [ 709.659944][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 83 seconds [ 709.671292][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 83 seconds [ 709.682744][ T5929] usb 6-1: No valid video chain found. [ 709.695333][ T5929] usb 6-1: USB disconnect, device number 124 [ 709.774850][ T44] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 709.810155][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 709.825698][ T44] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 709.833307][ T44] usb 8-1: can't read configurations, error -61 [ 709.964504][ T44] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 709.989693][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 709.999175][ T44] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 710.006961][ T44] usb 8-1: can't read configurations, error -61 [ 710.013572][ T44] usb usb8-port1: unable to enumerate USB device [ 710.422701][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.664150][ T1209] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 710.794059][ T1209] usb 6-1: device descriptor read/64, error -71 [ 711.033980][ T1209] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 711.163938][ T1209] usb 6-1: device descriptor read/64, error -71 [ 711.274751][ T1209] usb usb6-port1: attempt power cycle [ 711.613593][ T1209] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 711.634256][ T1209] usb 6-1: device descriptor read/8, error -71 [ 711.883532][ T1209] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 711.906675][ T1209] usb 6-1: device descriptor read/8, error -71 [ 711.963562][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 84 seconds [ 711.974326][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 84 seconds [ 711.985282][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 84 seconds [ 711.996225][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 84 seconds [ 712.014044][ T1209] usb usb6-port1: unable to enumerate USB device [ 712.063355][ T5955] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 712.213283][ T5955] usb 8-1: Using ep0 maxpacket: 8 [ 712.219893][ T5955] usb 8-1: config 162 has an invalid interface number: 76 but max is 1 [ 712.228266][ T5955] usb 8-1: config 162 has an invalid interface number: 238 but max is 1 [ 712.237793][ T5955] usb 8-1: config 162 has an invalid interface number: 253 but max is 1 [ 712.246366][ T5955] usb 8-1: config 162 has 3 interfaces, different from the descriptor's value: 2 [ 712.255597][ T5955] usb 8-1: config 162 has no interface number 0 [ 712.261855][ T5955] usb 8-1: config 162 has no interface number 1 [ 712.268192][ T5955] usb 8-1: config 162 has no interface number 2 [ 712.275449][ T5955] usb 8-1: config 162 interface 238 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 712.286605][ T5955] usb 8-1: config 162 interface 238 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 712.297818][ T5955] usb 8-1: config 162 interface 238 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 712.309794][ T5955] usb 8-1: config 162 interface 238 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 11 [ 712.324839][ T5955] usb 8-1: too many endpoints for config 162 interface 253 altsetting 49: 131, using maximum allowed: 30 [ 712.336338][ T5955] usb 8-1: config 162 interface 253 altsetting 49 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 712.348689][ T5955] usb 8-1: config 162 interface 253 altsetting 49 endpoint 0x83 has an invalid bInterval 139, changing to 11 [ 712.360516][ T5955] usb 8-1: config 162 interface 253 altsetting 49 endpoint 0x83 has invalid maxpacket 17675, setting to 1024 [ 712.372277][ T5955] usb 8-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 712.383586][ T5955] usb 8-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 712.394843][ T5955] usb 8-1: config 162 interface 253 altsetting 49 bulk endpoint 0xC has invalid maxpacket 64 [ 712.405126][ T5955] usb 8-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0x9, skipping [ 712.417210][ T5955] usb 8-1: config 162 interface 253 altsetting 49 has 6 endpoint descriptors, different from the interface descriptor's value: 131 [ 712.430828][ T5955] usb 8-1: config 162 interface 238 has no altsetting 0 [ 712.438052][T13786] Bluetooth: hci6: command 0x1003 tx timeout [ 712.438343][ T5955] usb 8-1: config 162 interface 253 has no altsetting 0 [ 712.446978][ T5864] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 712.466850][ T5955] usb 8-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78 [ 712.476145][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.484528][ T5955] usb 8-1: Product: syz [ 712.488708][ T5955] usb 8-1: Manufacturer: syz [ 712.493416][ T5955] usb 8-1: SerialNumber: syz [ 712.725563][ T5955] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 712.744100][ T2343] usb 8-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 712.765630][ T5955] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 712.779408][ T2343] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 712.798806][ T5955] usb 8-1: selecting invalid altsetting 0 [ 712.859880][ T5955] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 712.896643][ T5955] usb 8-1: selecting invalid altsetting 0 [ 712.982460][ T5955] usb 8-1: USB disconnect, device number 81 [ 712.998609][T16487] netlink: 'syz.4.2915': attribute type 2 has an invalid length. [ 713.032871][T16487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2915'. [ 713.536073][T16498] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 713.548558][T16498] netlink: 'syz.5.2918': attribute type 2 has an invalid length. [ 714.273120][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 85 seconds [ 714.284129][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 85 seconds [ 714.295103][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 85 seconds [ 714.306236][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 85 seconds [ 714.352935][T15679] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 714.512260][T15679] usb 6-1: Using ep0 maxpacket: 8 [ 714.521874][T15679] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.538483][T15679] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 714.547622][T15679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.556005][T15679] usb 6-1: Product: syz [ 714.560197][T15679] usb 6-1: Manufacturer: syz [ 714.566215][T15679] usb 6-1: SerialNumber: syz [ 714.573499][T15679] usb 6-1: config 0 descriptor?? [ 714.586985][T15679] comedi comedi4: Wrong number of endpoints [ 714.593519][T15679] dt9812 6-1:0.0: driver 'dt9812' failed to auto-configure device. [ 714.786282][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.795998][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.806185][ T5929] usb 6-1: USB disconnect, device number 3 [ 715.411295][T16528] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2928'. [ 715.681560][ T5929] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 715.833586][ T5929] usb 6-1: no configurations [ 715.838237][ T5929] usb 6-1: can't read configurations, error -22 [ 715.971368][ T5929] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 716.122050][ T5929] usb 6-1: no configurations [ 716.126707][ T5929] usb 6-1: can't read configurations, error -22 [ 716.133478][ T5929] usb usb6-port1: attempt power cycle [ 716.471297][ T5929] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 716.494734][ T5929] usb 6-1: no configurations [ 716.499415][ T5929] usb 6-1: can't read configurations, error -22 [ 716.602873][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 86 seconds [ 716.614584][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 86 seconds [ 716.625596][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 86 seconds [ 716.636636][ T5929] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 716.644258][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 86 seconds [ 716.672432][ T5929] usb 6-1: no configurations [ 716.677122][ T5929] usb 6-1: can't read configurations, error -22 [ 716.686214][ T5929] usb usb6-port1: unable to enumerate USB device [ 716.725698][T16540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=33554656 (67109312 ns) > initial count (392 ns). Using initial count to start timer. [ 716.745296][T16540] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2932'. [ 717.142548][T16547] syzkaller1: entered promiscuous mode [ 717.148194][T16547] syzkaller1: entered allmulticast mode [ 717.316837][T16549] overlayfs: conflicting lowerdir path [ 717.543636][T16554] IPv6: syztnl0: Disabled Multicast RS [ 718.927146][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 87 seconds [ 718.938174][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 87 seconds [ 718.949604][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 87 seconds [ 718.960959][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 87 seconds [ 719.349706][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 719.509826][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 719.517342][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 719.527264][ T24] usb 6-1: config 8 interface 0 has no altsetting 0 [ 719.537147][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=817b, bcdDevice=b9.c4 [ 719.546438][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.555102][ T24] usb 6-1: Product: syz [ 719.559392][ T24] usb 6-1: Manufacturer: syz [ 719.564166][ T24] usb 6-1: SerialNumber: syz [ 719.797665][ T24] usb 6-1: USB disconnect, device number 8 [ 720.492868][T16575] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003 [ 721.229051][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 88 seconds [ 721.240057][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 88 seconds [ 721.251203][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 88 seconds [ 721.262218][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 88 seconds [ 721.991798][T16626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2960'. [ 723.308429][T15624] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 723.463861][T15624] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 723.473167][T15624] usb 6-1: config 0 has no interface number 0 [ 723.482387][T15624] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 723.491501][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.499582][T15624] usb 6-1: Product: syz [ 723.503896][T15624] usb 6-1: Manufacturer: syz [ 723.508645][T15624] usb 6-1: SerialNumber: syz [ 723.516189][T15624] usb 6-1: config 0 descriptor?? [ 723.550233][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 89 seconds [ 723.561036][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 89 seconds [ 723.572911][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 89 seconds [ 723.583900][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 89 seconds [ 724.208912][T15624] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 724.215576][T15624] usb 6-1: No valid video chain found. [ 724.237295][T15624] usb 6-1: USB disconnect, device number 9 [ 725.058350][T15679] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 725.214066][T15679] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 725.224156][T15679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.232662][T15679] usb 6-1: Product: syz [ 725.236929][T15679] usb 6-1: Manufacturer: syz [ 725.242028][T15679] usb 6-1: SerialNumber: syz [ 725.248846][T15679] usb 6-1: config 0 descriptor?? [ 725.258532][T15679] usbsevseg 6-1:0.0: USB 7 Segment device now attached [ 725.460615][ T5929] usb 6-1: USB disconnect, device number 10 [ 725.469734][ T5929] usbsevseg 6-1:0.0: USB 7 Segment now disconnected [ 725.878866][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 90 seconds [ 725.889825][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 90 seconds [ 725.900881][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 90 seconds [ 725.911818][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 90 seconds [ 726.532064][ T5929] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 726.688431][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 726.695270][ T5929] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 726.714195][ T5929] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 726.723426][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.731833][ T5929] usb 6-1: Product: syz [ 726.736047][ T5929] usb 6-1: Manufacturer: syz [ 726.740938][ T5929] usb 6-1: SerialNumber: syz [ 726.753183][ T5929] usb 6-1: config 0 descriptor?? [ 726.759499][T16699] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 726.771383][ T5929] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89 [ 726.970304][ T5929] usb 6-1: USB disconnect, device number 11 [ 726.976397][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 727.161668][T16712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.173826][T16712] tipc: Started in network mode [ 727.179113][T16712] tipc: Node identity 4, cluster identity 4711 [ 727.185284][T16712] tipc: Node number set to 4 [ 727.898335][ T24] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 728.062885][ T24] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 728.071148][ T24] usb 6-1: config 0 has no interface number 0 [ 728.077405][ T24] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 728.089660][ T24] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 728.102960][ T24] usb 6-1: config 0 interface 48 has no altsetting 0 [ 728.111456][ T24] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 728.120686][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.136041][ T24] usb 6-1: config 0 descriptor?? [ 728.192280][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 91 seconds [ 728.203756][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 91 seconds [ 728.215139][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 91 seconds [ 728.226386][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 91 seconds [ 728.353758][ T24] usb 6-1: string descriptor 0 read error: -71 [ 728.366103][ T24] asix 6-1:0.48 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 728.377376][ T24] asix 6-1:0.48: probe with driver asix failed with error -71 [ 728.397255][ T24] usb 6-1: USB disconnect, device number 12 [ 729.138423][T15624] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 729.292031][T15624] usb 6-1: Using ep0 maxpacket: 16 [ 729.299315][T15624] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 729.307890][T15624] usb 6-1: can't read configurations, error -61 [ 729.439450][T15624] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 729.588525][T15624] usb 6-1: Using ep0 maxpacket: 16 [ 729.602069][T15624] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 729.618162][T15624] usb 6-1: can't read configurations, error -61 [ 729.626926][T15624] usb usb6-port1: attempt power cycle [ 729.982018][T15624] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 730.013666][T15624] usb 6-1: Using ep0 maxpacket: 16 [ 730.041685][T15624] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 730.060880][T15624] usb 6-1: can't read configurations, error -61 [ 730.203397][T15624] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 730.231804][T15624] usb 6-1: Using ep0 maxpacket: 16 [ 730.242377][T15624] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 730.250250][T15624] usb 6-1: can't read configurations, error -61 [ 730.256841][T15624] usb usb6-port1: unable to enumerate USB device [ 730.508505][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 92 seconds [ 730.519530][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 92 seconds [ 730.530562][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 92 seconds [ 730.542489][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 92 seconds [ 731.373663][T16741] netlink: 'syz.7.2994': attribute type 2 has an invalid length. [ 731.384857][T16741] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2994'. [ 731.394540][T16741] nbd: must specify a device to reconfigure [ 732.023425][T16749] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 732.034590][T16749] block device autoloading is deprecated and will be removed. [ 732.588786][T15624] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 732.754751][T15624] usb 6-1: Using ep0 maxpacket: 16 [ 732.763267][T15624] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 732.779287][T15624] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 732.794586][T15624] usb 6-1: config 1 interface 0 has no altsetting 0 [ 732.806516][T15624] usb 6-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 732.821840][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.830781][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 93 seconds [ 732.841923][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 93 seconds [ 732.853047][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 93 seconds [ 732.864581][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 93 seconds [ 732.876637][T15624] usb 6-1: Product: syz [ 732.882569][T15624] usb 6-1: Manufacturer: syz [ 732.887329][T15624] usb 6-1: SerialNumber: syz [ 732.906123][T16760] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 732.914222][T16760] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 733.099055][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.108525][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.117827][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.129927][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.134660][T16759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.143158][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.155145][T16759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.160311][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.177926][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.187675][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.203876][T15624] usb 6-1: USB disconnect, device number 17 [ 733.210776][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3007'. [ 733.507201][ T30] audit: type=1326 audit(6049044360.506:3983): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=16790 comm="syz.8.3010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7a8f8eba9 code=0x0 [ 733.651065][T16795] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 733.651065][T16795] The task syz.4.3008 (16795) triggered the difference, watch for misbehavior. [ 734.048329][ T5915] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 734.147386][ T30] audit: type=1326 audit(6049044361.146:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd58eba9 code=0x7fc00000 [ 734.169872][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.184353][ T30] audit: type=1326 audit(6049044361.146:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdebd58eba9 code=0x7fc00000 [ 734.201882][ T5915] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 734.206752][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.217795][ T30] audit: type=1326 audit(6049044361.146:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd58eba9 code=0x7fc00000 [ 734.240004][ T5915] usb 6-1: config 0 has no interface number 0 [ 734.256200][ T30] audit: type=1326 audit(6049044361.146:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd58eba9 code=0x7fc00000 [ 734.270943][ T5915] usb 6-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 734.301056][ T5915] usb 6-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 734.317235][ T5915] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 734.330022][ T5915] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 734.349781][ T5915] usb 6-1: config 0 interface 107 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 734.365293][ T5915] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 734.374891][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.383127][ T5915] usb 6-1: Product: syz [ 734.387334][ T5915] usb 6-1: Manufacturer: syz [ 734.395054][ T5915] usb 6-1: SerialNumber: syz [ 734.405860][ T5915] usb 6-1: config 0 descriptor?? [ 734.415374][T16801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.424828][ T5915] kvaser_usb 6-1:0.107: error -EMSGSIZE: Cannot get software info [ 734.435771][ T5915] kvaser_usb 6-1:0.107: probe with driver kvaser_usb failed with error -90 [ 734.493936][T16807] tmpfs: Invalid uid '0x00000000ffffffff' [ 734.624754][T15624] usb 6-1: USB disconnect, device number 18 [ 734.664109][T16811] netlink: 'syz.7.3015': attribute type 29 has an invalid length. [ 734.673488][T16811] netlink: 'syz.7.3015': attribute type 29 has an invalid length. [ 735.149651][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 94 seconds [ 735.160633][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 94 seconds [ 735.172441][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 94 seconds [ 735.184878][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 94 seconds [ 735.941666][ T3471] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.008316][ T5915] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 736.100173][ T3471] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.194862][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 736.210382][ T3471] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.220895][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.252489][ T5915] usb 6-1: config 0 descriptor?? [ 736.336826][ T3471] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.692269][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 736.706797][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 736.726366][ T5915] usb 6-1: USB disconnect, device number 19 [ 736.794264][T13786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 736.809380][T13786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.820264][T13786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.840620][T13786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.852093][T13786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.233688][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.292470][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.310920][ T3471] bond0 (unregistering): Released all slaves [ 737.453780][T16861] __nla_validate_parse: 25 callbacks suppressed [ 737.453802][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 737.472911][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 95 seconds [ 737.483911][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 95 seconds [ 737.495770][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 95 seconds [ 737.508050][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 95 seconds [ 737.519409][T16861] netlink: 'syz.4.3035': attribute type 3 has an invalid length. [ 737.581325][T16861] hugetlbfs: Unknown parameter 'nr€òinkdes' [ 737.611687][T15624] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 737.780993][T15624] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 737.806342][T15624] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 737.856830][T15624] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.906692][T15624] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.933159][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.963132][T15624] usb 6-1: Product: syz [ 737.967363][T15624] usb 6-1: Manufacturer: syz [ 737.998026][T15624] usb 6-1: SerialNumber: syz [ 738.260587][T16885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.291917][T16885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.434868][T15624] usb 6-1: 0:2 : does not exist [ 738.571002][T15624] usb 6-1: USB disconnect, device number 20 [ 738.731204][T13700] udevd[13700]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.792053][ T3471] hsr_slave_0: left promiscuous mode [ 738.798782][ T3471] hsr_slave_1: left promiscuous mode [ 738.804669][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.812575][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.822765][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.831538][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.856474][ T3471] veth1_macvtap: left promiscuous mode [ 738.862555][ T3471] veth0_macvtap: left promiscuous mode [ 738.868339][ T3471] veth1_vlan: left promiscuous mode [ 738.873739][ T3471] veth0_vlan: left promiscuous mode [ 738.919619][ T5864] Bluetooth: hci5: command tx timeout [ 739.038554][T15624] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 739.236591][T15624] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 739.248024][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.262865][T15624] usb 6-1: Product: syz [ 739.267074][T15624] usb 6-1: Manufacturer: syz [ 739.274355][T15624] usb 6-1: SerialNumber: syz [ 739.286489][T15624] usb 6-1: config 0 descriptor?? [ 739.387503][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 739.443758][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 739.519100][T15624] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 739.798620][ T56] block nbd1: Possible stuck request ffff8880258e5240: control (read@0,1024B). Runtime 96 seconds [ 739.809455][ T56] block nbd1: Possible stuck request ffff8880258e5400: control (read@1024,1024B). Runtime 96 seconds [ 739.823125][ T56] block nbd1: Possible stuck request ffff8880258e55c0: control (read@2048,1024B). Runtime 96 seconds [ 739.834651][ T56] block nbd1: Possible stuck request ffff8880258e5780: control (read@3072,1024B). Runtime 96 seconds [ 740.097870][T16843] chnl_net:caif_netlink_parms(): no params data found [ 740.271001][ T31] INFO: task syz.1.2255:14184 blocked for more than 143 seconds. [ 740.289688][ T31] Not tainted syzkaller #0 [ 740.294697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 740.303645][ T31] task:syz.1.2255 state:D stack:25512 pid:14184 tgid:14183 ppid:5858 task_flags:0x400140 flags:0x00004004 [ 740.315821][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 740.319623][ T31] [ 740.322595][ T31] __schedule+0x1798/0x4cc0 [ 740.327243][ T31] ? vfs_open+0x3b/0x340 [ 740.332082][ T31] ? __lock_acquire+0xab9/0xd20 [ 740.336976][ T31] ? __lock_acquire+0xab9/0xd20 [ 740.342858][ T31] ? __pfx___schedule+0x10/0x10 [ 740.347775][ T31] ? schedule+0x91/0x360 [ 740.372798][ T31] schedule+0x165/0x360 [ 740.377045][ T31] schedule_preempt_disabled+0x13/0x30 [ 740.407769][ T31] __mutex_lock+0x7e6/0x1350 [ 740.422914][ T31] ? __mutex_lock+0x5bb/0x1350 [ 740.427745][ T31] ? bdev_open+0xe0/0xd30 [ 740.440209][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 740.445327][ T31] ? wait_on_inode+0xc0/0x230 [ 740.450280][ T31] ? disk_block_events+0xab/0x120 [ 740.455393][ T31] ? bdev_open+0xaf/0xd30 [ 740.459927][ T31] bdev_open+0xe0/0xd30 [ 740.464223][ T31] blkdev_open+0x457/0x600 [ 740.469416][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 740.474475][ T31] do_dentry_open+0x953/0x13f0 [ 740.480253][ T31] vfs_open+0x3b/0x340 [ 740.484601][ T31] ? path_openat+0x2ecd/0x3830 [ 740.495078][ T31] path_openat+0x2ee5/0x3830 [ 740.516758][ T31] ? __pfx_path_openat+0x10/0x10 [ 740.536122][ T31] do_filp_open+0x1fa/0x410 [ 740.544929][ T31] ? __lock_acquire+0xab9/0xd20 [ 740.550296][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 740.558543][ T31] ? _raw_spin_unlock+0x28/0x50 [ 740.563547][ T31] ? alloc_fd+0x64c/0x6c0 [ 740.598300][ T31] do_sys_openat2+0x121/0x1c0 [ 740.603095][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.628669][ T31] ? rcu_is_watching+0x15/0xb0 [ 740.633539][ T31] __x64_sys_openat+0x138/0x170 [ 740.682326][ T31] do_syscall_64+0xfa/0xfa0 [ 740.686956][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.738481][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.744638][ T31] ? clear_bhb_loop+0x60/0xb0 [ 740.798459][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.808882][T15624] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 740.814365][ T31] RIP: 0033:0x7f4bc7b8d510 [ 740.826610][ T31] RSP: 002b:00007f4bc8991b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 740.842287][ T31] RAX: ffffffffffffffda RBX: 0000000000004902 RCX: 00007f4bc7b8d510 [ 740.848320][T15624] usb 6-1: USB disconnect, device number 21 [ 740.852614][ T31] RDX: 0000000000004902 RSI: 00007f4bc8991c10 RDI: 00000000ffffff9c [ 740.874236][ T31] RBP: 00007f4bc8991c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 740.896941][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 740.905362][ T31] R13: 00007f4bc7dd6038 R14: 00007f4bc7dd5fa0 R15: 00007fff88c5db08 [ 740.913779][ T31] [ 740.926395][ T31] [ 740.926395][ T31] Showing all locks held in the system: [ 740.934876][ T31] 1 lock held by pool_workqueue_/3: [ 740.968526][ T31] #0: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 740.998280][ T5864] Bluetooth: hci5: command tx timeout [ 741.008535][ T31] 1 lock held by khungtaskd/31: [ 741.013430][ T31] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 741.058321][ T31] 2 locks held by pvrusb2-context/2343: [ 741.063948][ T31] #0: ffff88805c738188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0 [ 741.075020][ T31] #1: ffffffff8e3e2790 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 741.086393][ T31] 4 locks held by kworker/u8:9/3471: [ 741.092105][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 741.103397][ T31] #1: ffffc9000b7a7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 741.128257][ T31] #2: ffffffff8f945770 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 741.137699][ T31] #3: ffffffff8e541ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 741.186490][ T31] 2 locks held by getty/5619: [ 741.191530][ T31] #0: ffff8880302070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 741.218265][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 741.238492][ T31] 2 locks held by kworker/0:6/5954: [ 741.243742][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 741.278497][ T31] #1: ffffc9000462fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 741.314433][ T31] 6 locks held by kworker/1:6/5955: [ 741.335505][ T31] #0: ffff8881446c8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 741.357848][ T31] #1: ffffc9000460fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 741.408241][ T31] #2: ffff8881453bd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 741.417211][ T31] #3: ffff88801fefb198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 741.468695][ T31] #4: ffff8880329ea160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 741.502030][ T31] #5: ffff88805c738188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 741.544922][ T31] 1 lock held by udevd/8423: [ 741.558426][ T31] #0: ffff88802581b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 741.567755][ T31] 1 lock held by syz.5.1930/13044: [ 741.599958][ T31] 4 locks held by udevd/13699: [ 741.604812][ T31] #0: ffff88805df492f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 741.618907][ T31] #1: ffff88805856fc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 741.634075][ T31] #2: ffff8880420082d8 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 741.644992][ T31] #3: ffff88801fefb198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 741.666658][ T31] 1 lock held by syz.1.2255/14184: [ 741.672202][ T31] #0: ffff88802581b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 741.681872][ T31] 1 lock held by syz.6.2622/15402: [ 741.687024][ T31] #0: ffff88802581b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 741.696553][ T31] 1 lock held by syz.6.2622/15405: [ 741.702507][ T31] #0: ffff88802581b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 741.712033][ T31] 2 locks held by syz-executor/16843: [ 741.717412][ T31] #0: ffffffff8f0c1820 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 741.727015][ T31] #1: ffffffff8f952608 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 741.736270][ T31] 1 lock held by syz.7.3038/16878: [ 741.741483][ T31] #0: ffffffff8f952608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 741.750544][ T31] 1 lock held by syz.4.3039/16879: [ 741.755677][ T31] #0: ffffffff8f952608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 741.764895][ T31] [ 741.768067][ T31] ============================================= [ 741.768067][ T31] [ 741.824090][ T31] NMI backtrace for cpu 0 [ 741.824121][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 741.824146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.824160][ T31] Call Trace: [ 741.824169][ T31] [ 741.824179][ T31] dump_stack_lvl+0x189/0x250 [ 741.824207][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.824229][ T31] ? __pfx__printk+0x10/0x10 [ 741.824273][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 741.824302][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 741.824331][ T31] ? __pfx__printk+0x10/0x10 [ 741.824367][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 741.824393][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 741.824423][ T31] watchdog+0xf60/0xfa0 [ 741.824452][ T31] ? watchdog+0x1e2/0xfa0 [ 741.824497][ T31] kthread+0x711/0x8a0 [ 741.824533][ T31] ? __pfx_watchdog+0x10/0x10 [ 741.824555][ T31] ? __pfx_kthread+0x10/0x10 [ 741.824589][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.824620][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.824650][ T31] ? __pfx_kthread+0x10/0x10 [ 741.824684][ T31] ret_from_fork+0x47c/0x820 [ 741.824712][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 741.824747][ T31] ? __switch_to_asm+0x39/0x70 [ 741.824769][ T31] ? __switch_to_asm+0x33/0x70 [ 741.824792][ T31] ? __pfx_kthread+0x10/0x10 [ 741.824825][ T31] ret_from_fork_asm+0x1a/0x30 [ 741.824868][ T31] [ 741.824876][ T31] Sending NMI from CPU 0 to CPUs 1: [ 741.971720][ C1] NMI backtrace for cpu 1 [ 741.971739][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 741.971760][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.971773][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 741.971804][ C1] RIP: 0010:unwind_next_frame+0x130e/0x2390 [ 741.971832][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 741.971855][ C1] RSP: 0018:ffffc90000ac73f8 EFLAGS: 00000a02 [ 741.971870][ C1] RAX: 0000000000000000 RBX: ffffffff8ff59dc8 RCX: dffffc0000000000 [ 741.971883][ C1] RDX: ffffffff8ff59d58 RSI: ffffffff9070bbec RDI: ffffffff8c04efa0 [ 741.971898][ C1] RBP: ffffffff8ff59dc8 R08: 000000000000001f R09: ffffffff8173fd35 [ 741.971911][ C1] R10: ffffc90000ac7518 R11: ffffffff81ac7430 R12: ffffffff8133bfe9 [ 741.971926][ C1] R13: ffffffff8ff59dc4 R14: ffffc90000ac74c8 R15: ffffffff8ff59dc8 [ 741.971939][ C1] FS: 0000000000000000(0000) GS:ffff8881258b1000(0000) knlGS:0000000000000000 [ 741.971955][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.971967][ C1] CR2: 000055d3ec447138 CR3: 000000007ecb4000 CR4: 00000000003526f0 [ 741.971985][ C1] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 741.971995][ C1] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 741.972007][ C1] Call Trace: [ 741.972014][ C1] [ 741.972025][ C1] ? unwind_next_frame+0xa5/0x2390 [ 741.972049][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 741.972072][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 741.972100][ C1] arch_stack_walk+0x11c/0x150 [ 741.972128][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 741.972150][ C1] stack_trace_save+0x9c/0xe0 [ 741.972175][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 741.972207][ C1] kasan_save_track+0x3e/0x80 [ 741.972225][ C1] ? kasan_save_track+0x3e/0x80 [ 741.972241][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 741.972259][ C1] ? __kmalloc_node_track_caller_noprof+0x568/0x800 [ 741.972280][ C1] ? kmalloc_reserve+0x136/0x290 [ 741.972307][ C1] ? __alloc_skb+0x142/0x2d0 [ 741.972332][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 741.972356][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 741.972378][ C1] ? worker_thread+0x8a0/0xda0 [ 741.972399][ C1] ? kthread+0x711/0x8a0 [ 741.972423][ C1] ? ret_from_fork+0x47c/0x820 [ 741.972442][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 741.972482][ C1] ? __alloc_skb+0x142/0x2d0 [ 741.972510][ C1] __kasan_kmalloc+0x93/0xb0 [ 741.972529][ C1] __kmalloc_node_track_caller_noprof+0x568/0x800 [ 741.972550][ C1] ? __alloc_skb+0x142/0x2d0 [ 741.972575][ C1] ? rcu_is_watching+0x15/0xb0 [ 741.972599][ C1] ? __alloc_skb+0x142/0x2d0 [ 741.972625][ C1] kmalloc_reserve+0x136/0x290 [ 741.972655][ C1] __alloc_skb+0x142/0x2d0 [ 741.972683][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 741.972716][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 741.972738][ C1] process_scheduled_works+0xae1/0x17b0 [ 741.972774][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 741.972804][ C1] worker_thread+0x8a0/0xda0 [ 741.972839][ C1] kthread+0x711/0x8a0 [ 741.972889][ C1] ? __pfx_worker_thread+0x10/0x10 [ 741.972911][ C1] ? __pfx_kthread+0x10/0x10 [ 741.972939][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.972965][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.972992][ C1] ? __pfx_kthread+0x10/0x10 [ 741.973019][ C1] ret_from_fork+0x47c/0x820 [ 741.973041][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 741.973066][ C1] ? __switch_to_asm+0x39/0x70 [ 741.973086][ C1] ? __switch_to_asm+0x33/0x70 [ 741.973106][ C1] ? __pfx_kthread+0x10/0x10 [ 741.973133][ C1] ret_from_fork_asm+0x1a/0x30 [ 741.973174][ C1] [ 741.974451][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 742.350975][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.360087][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 742.370163][ T31] Call Trace: [ 742.373445][ T31] [ 742.376378][ T31] dump_stack_lvl+0x99/0x250 [ 742.380973][ T31] ? __asan_memcpy+0x40/0x70 [ 742.385573][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.390778][ T31] ? __pfx__printk+0x10/0x10 [ 742.395489][ T31] vpanic+0x237/0x6d0 [ 742.399489][ T31] ? __pfx_vpanic+0x10/0x10 [ 742.404005][ T31] ? preempt_schedule_common+0x83/0xd0 [ 742.409489][ T31] panic+0xb9/0xc0 [ 742.413228][ T31] ? __pfx_panic+0x10/0x10 [ 742.417685][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 742.423093][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 742.429275][ T31] watchdog+0xf9f/0xfa0 [ 742.433460][ T31] ? watchdog+0x1e2/0xfa0 [ 742.437807][ T31] kthread+0x711/0x8a0 [ 742.441904][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.446593][ T31] ? __pfx_kthread+0x10/0x10 [ 742.451205][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 742.456423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.461637][ T31] ? __pfx_kthread+0x10/0x10 [ 742.466255][ T31] ret_from_fork+0x47c/0x820 [ 742.470871][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 742.476005][ T31] ? __switch_to_asm+0x39/0x70 [ 742.480773][ T31] ? __switch_to_asm+0x33/0x70 [ 742.485555][ T31] ? __pfx_kthread+0x10/0x10 [ 742.490164][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.494947][ T31] [ 742.498373][ T31] Kernel Offset: disabled [ 742.502713][ T31] Rebooting in 86400 seconds..