last executing test programs: 19m32.265780892s ago: executing program 32 (id=115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0xfffffffc, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 18m39.3325392s ago: executing program 33 (id=417): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)={0x0, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic]}, 0x10) 16m6.615913481s ago: executing program 34 (id=1534): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x1df) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000800)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 14m35.075271738s ago: executing program 35 (id=1976): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 9m29.30350757s ago: executing program 36 (id=3838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008004"]) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000002060300000000000800000005000000050005000a00000005000400000000190900020073797a320000000005000100060000000d0003006c6973743a736574000000000c0007"], 0x54}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r7 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000180)={0x1000000, 0xd, 0x2, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x8b7b0a3c}) 7m35.571717528s ago: executing program 37 (id=4640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 7m29.05133136s ago: executing program 38 (id=4663): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x9, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x10, 0xfffffffffffffffa}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x31384142}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x19d2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x1c, 0x114, 0x3, {{0x0, 0xfffffffffffffe0f}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x8500, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f0000000180)={0x30, 0x0, 0x3bcd9a38fd325baf, 0x0, 0xf, 0x9, 0x4, 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xa0}], 0x1, 0x40800) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x10000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000480)={"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"}) 7m10.057814719s ago: executing program 9 (id=4745): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 7m9.824309044s ago: executing program 9 (id=4746): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905060220000200020905822b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x92, &(0x7f0000000040)=@string={0x92, 0x3, "424c50285e4315fa6baf596c86f15222ef9e81096464ee1cb2458edc27697762cb39860231ca184beddd3649c6898d17d796b0d864a316e9da6223d1f6e73104991a254f0a2751d28bbec121af7be879df7b017fb0b48586755a6a9167782d4e31e580acb1ac3c5c128b2c097545623573e8c7b62f27df5cf809a1dd4644ac56140b318183ebe16486b3b0452e1d85a6"}}, {0xfa, &(0x7f0000000100)=@string={0xfa, 0x3, "c92942e55917011bc950813df31a45f25317c3a63b28da864e8db98e75d72a8e38afd654644be0d6c334b794f7d7ef65a2bc28781da40243c4680a4c944b74f0a67ba25dd3f1b0b660c9734b1068d9821c2e17f14b041f17b2f63539c76208aff703cbe4355e57a3192c9c80585193756bc7a677f21fa11de1659d80f17afaada5e11c1f6c1d3f53478430fb255536d7cbfac2efca37d4aab091951c3a5bbc07fe2feb438530292ac2e6059d16efef878f80946c494fda2c33dccbbb8ab07bfd7dcc885c6317d86d6a6f06630c343c30cf98fe74e680f99d5529b56cfdb4aa2b4f2c3432f940bfc40528e517f4c0a985aa0605caaf56bade"}}]}) 7m8.190197822s ago: executing program 9 (id=4750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000001050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) 7m7.996331144s ago: executing program 9 (id=4752): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) msgctl$MSG_STAT(0x0, 0xb, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010022bd7000000000fb1745330008000300", @ANYRES32=r2, @ANYBLOB="24001d800c000080060005000500000034000080100000800c000200fb00000000000000"], 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1040, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m7.748692037s ago: executing program 9 (id=4753): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x80000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000480)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000080)=""/7, 0x7}], 0xa}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006924db811fa8c23d14a9537a5907ebf9e535a668963058012258d935f882962d94ee15ace247f9f05c2a3660973c8fe59066f6982aaca88b39e8c07897edc24cf833deb2797b8f03f24defaed99eb4bbc8a860022fe7b3a950cedf2b9c4848d29ca60ff90e8238bcc76ccf8d4fdc7a250b0fe29178d7c33c1832a7c54c1499b139b1efce", @ANYRES16=r2, @ANYBLOB="050000000800000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050004000000"], 0x24}}, 0x0) 7m7.406758983s ago: executing program 9 (id=4754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES8=r0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00060000c7000279f4306c1ad46e357c9d57a2d382392457e00dced151f7bdb237669fd1870981cfd307df0508eaea8f0b1b79d3a38c37b4a3134bfe316b7444238160534ca6110d4a66d334c078ed8898a31f7d34378371140c74311478b4bbd9469c8760c1d272110cacc1007c441705509dee69743a4e2bfb49adcd28dff2b7e31f4ff316f40ee97beffed0d9432544231e0f4f711a0120727b6b1640"], 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900014073797a3000000000400000000e0a9ff500000000000000000100005a0000000073797a30000000000900020073797a3000008000140003800800014000000000080002400000000038000000160101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380080000bb96f95ae4b89a8ee72e1b1617a88811d684ecc715afc3183e5c6756d233b8039746bb673e6513e9b54577f24c626930c5bd6c8e6f461121ac757ea5014c5b3e78526610597208230868b267ae320d52f9427bc871f73f97d8ab5e42a869b050282ee944d691d317281c670d4c47b5f54473c93e720458e6ee8c35cbfaea55642debfe8b19682422b4b12a4a3017505a59065795b0b96b91f48eafa4ccf5e63e5916f4b825aaaf2ba0e711ac34c3634b82c4ff151a29d59bb8c24d227717155c469eee41e1b44f2d1db6382fe35dca7884734991274b781ca6687910b9f000e8b5f05a9c3c59614c2a6a2efcdb05de614e4775e618817a1c6602c4a535136029de975de2dbd01328d37a44e6c5a62e2ff0afe5824805a70447e2ad825eda688f12435313"], 0xc0}}, 0xa010) memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00\'\x00'], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58004de69b5c0e536036e396d00000020616080000000000000000010000021100030083884ef93a69702c6d61726b00008000050001000700000005000500020000000900020073797a300000000005000400000000000c"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) madvise(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x65) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x10) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x1, 0x2}, &(0x7f0000000340)=0x90) socket$vsock_stream(0x28, 0x1, 0x0) 7m6.946327473s ago: executing program 39 (id=4754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES8=r0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00060000c7000279f4306c1ad46e357c9d57a2d382392457e00dced151f7bdb237669fd1870981cfd307df0508eaea8f0b1b79d3a38c37b4a3134bfe316b7444238160534ca6110d4a66d334c078ed8898a31f7d34378371140c74311478b4bbd9469c8760c1d272110cacc1007c441705509dee69743a4e2bfb49adcd28dff2b7e31f4ff316f40ee97beffed0d9432544231e0f4f711a0120727b6b1640"], 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900014073797a3000000000400000000e0a9ff500000000000000000100005a0000000073797a30000000000900020073797a3000008000140003800800014000000000080002400000000038000000160101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380080000bb96f95ae4b89a8ee72e1b1617a88811d684ecc715afc3183e5c6756d233b8039746bb673e6513e9b54577f24c626930c5bd6c8e6f461121ac757ea5014c5b3e78526610597208230868b267ae320d52f9427bc871f73f97d8ab5e42a869b050282ee944d691d317281c670d4c47b5f54473c93e720458e6ee8c35cbfaea55642debfe8b19682422b4b12a4a3017505a59065795b0b96b91f48eafa4ccf5e63e5916f4b825aaaf2ba0e711ac34c3634b82c4ff151a29d59bb8c24d227717155c469eee41e1b44f2d1db6382fe35dca7884734991274b781ca6687910b9f000e8b5f05a9c3c59614c2a6a2efcdb05de614e4775e618817a1c6602c4a535136029de975de2dbd01328d37a44e6c5a62e2ff0afe5824805a70447e2ad825eda688f12435313"], 0xc0}}, 0xa010) memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00\'\x00'], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58004de69b5c0e536036e396d00000020616080000000000000000010000021100030083884ef93a69702c6d61726b00008000050001000700000005000500020000000900020073797a300000000005000400000000000c"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) madvise(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x65) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x10) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x1, 0x2}, &(0x7f0000000340)=0x90) socket$vsock_stream(0x28, 0x1, 0x0) 6m40.920526599s ago: executing program 0 (id=4854): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000028c0), 0x18020, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8bd4cec) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) write$P9_RLERROR(r2, &(0x7f0000000300)={0xb, 0x7, 0x2, {0x2, '\')'}}, 0xb) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x1, 0x5, 0x5}}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)={0xa, {0x1, 0xfffffffd, 0xa84e, 0x7ff}, {0x9, 0x83a, 0x0, 0x8}, {0x5, 0x4}}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m40.680106599s ago: executing program 0 (id=4855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac1(0x1, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x1, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x81, "0a49cd1704"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x2, 0x5, "3707000000f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xcb, 0x74, {0x7, 0x25, 0x1, 0x0, 0x7, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x18, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x81, 0x7ff}}}}}}}]}}, &(0x7f0000000000)={0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 6m37.476143779s ago: executing program 0 (id=4877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xe) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0xb, 0xf, 0x0, 0x2, 0x4, 0x8, 0x1, 0x7, 0x4, 0xb, 0xfa, 0x0, 0xfc000000, 0x3, 0x5, 0x3, 0x6f, 0x5, '\x00', 0xb3, 0x5}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x5dfc, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0xdc]}}) 6m37.38464761s ago: executing program 0 (id=4878): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x5, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x209850, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6m37.147937183s ago: executing program 0 (id=4880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x198}}, @wr_drn={0x68, 0x20, {0x7, 0x8}}, @in_dx={0x69, 0x20, {0x6f25, 0x6}}, @code={0xa, 0x3a, {"67400f22200f221b473db6491740f3af0f070f00537e0fc71f460fa266b82c010f00d866baa10066ed"}}, @uexit={0x0, 0x18, 0x100000000}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x55, {"0f219e8f2978e1ddf20faef40f20e035020000000f22e0b9800000c00f3235000100000f302b2ac4417d7f924eec0000c4e10c5dcf0f20d835200000000f22d866f30f09"}}, @wr_drn={0x68, 0x20, {0x2, 0x4}}, @wr_crn={0x67, 0x20, {0x3, 0x1}}, @rdmsr={0x66, 0x18, {0x40f}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0xc0011039}}, @set_irq_handler={0xc8, 0x20, {0x23, 0x2}}, @out_dx={0x6a, 0x28, {0xacad, 0x6, 0x57a}}, @nested_load_code={0x12e, 0x85, {0x2, "3e0f2217c4e379631ce7dc26676766460fc77210c74424007e000000c74424027b88b825ff1c24c744240049cf0000c74424020e800000c7442406000000000f011c24f30f2dd5c422f108b507000000b9800000c00f3235008000000f30c4e32d6cb55a0000007a2e410f01c4"}}, @uexit={0x0, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x5, 0x200}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x126, 0x0, 0x1e86}}, @out_dx={0x6a, 0x28, {0xa029, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x9f9}}, @rdmsr={0x66, 0x18, {0x8e9}}, @rdmsr={0x66, 0x18, {0xbf1}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}], 0x3ec}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="0f38067dbf64660f72f407660f1712836e5f0066b9800000c00f326635000100000f300f2d8904000f72e0c3bad00466edbaf80c66b87daf4c85266dbafc0cec0f01c967660f3a63410000", 0x4b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x161782, 0x0) ppoll(&(0x7f00000001c0)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000001b00)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaaca7, 0x25, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) poll(&(0x7f0000001140)=[{r5, 0x702}], 0x1, 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ff"], 0x0) ioctl$KVM_NMI(r3, 0xae9a) 6m36.646063867s ago: executing program 0 (id=4881): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffc, @private}}}, 0x108) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080), 0xca800}, {&(0x7f0000000000)="1cfd04a0", 0x4}], 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x0, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x108) 6m36.054841747s ago: executing program 40 (id=4881): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffc, @private}}}, 0x108) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080), 0xca800}, {&(0x7f0000000000)="1cfd04a0", 0x4}], 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x0, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x108) 5m12.672133666s ago: executing program 3 (id=5294): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xfffffff9, 0x3, 0x5, 0x3fd, 0x7, 0x7, 0x5, 0x80000000, 0x6, 0x9, 0x1, 0x1003, 0x6, 0xffff, 0x10003, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x4, 0x10, 0x46, 0x8, 0xe2df, 0x746f, 0x8c56, 0x5, 0x96c8, 0x1, 0x7, 0x8049]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x5607, 0x3d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x2e, 0x0, &(0x7f0000000440)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1}) 5m11.812378093s ago: executing program 3 (id=5303): r0 = socket(0x10, 0x3, 0x800000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0xfff, 0x10004}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='huge=always']) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r4, 0x7fff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5}, 0x8) chdir(&(0x7f0000000000)='./file0\x00') mount$9p_unix(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x100001, &(0x7f0000000200)={'trans=unix,', {[{@access_any}, {@access_any}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@measure}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'tmpfs\x00'}}]}}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14567e, 0xa0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103000000090585"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x60, 0x3, 0x3, "b3e71b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e24, 0xffff, @empty, 0x7ff}, 0x1c) 5m11.198649025s ago: executing program 3 (id=5308): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 5m11.122341941s ago: executing program 3 (id=5309): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0x1) close(r0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=0x7, 0x4) fgetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000100)=""/119, 0x77) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x18c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8131}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x702, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x64, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x140, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xfc, 0x6, "355d45c99ca84869ca22c91359a86f02196e5c39c42cb08e6617fabe1962b26fa44852d6adf0ab3a770f0681a4f610e1d84af56a1a86500b52208afad2d75adc9d84c3ff0f202b4c289565920ec7b4abb9528213b88a0faae18a0c1212bf2460fc1318075585df7f09b540ebc5a61c2a63d2d674fa2ce0c97f9bcaf1d1cf59c9598ea6398d1b4a5fca105cff9063dd68d0d1187861637ff9931802614c5e2e8772efe67e4b9c3daedfd214f0c4a9242eaf163f37bfb1afbc2ddba69163ca2b3a596289ebe4a652bda6739989f51f2f7535548328e148cbdcac3faf340601d0e3734f20532202c1965db9352c19252b472d8dc3ceb0391517"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x378}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r2 = accept4(r1, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000640)=0x80, 0x80000) syz_pidfd_open(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000680)=0x401, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000006c0)=""/159, &(0x7f0000000780)=0x9f) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x1}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfffc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9f, 0xbe, "324f29d2e5b88d66eb1c88d40fa2d0f9dbfa3472203ee88168963427240fa36cc83d2e907dd4604e4623c0c623039d6673ddddecf20f63a13e7474bbf5ab2d24c7983668c9d0ecba8e48feea9ddc7fab589a1cdff4a0368ce71a46768ecda54d035d0825add2c504ec588df5a22c808d23d09c7dd75855ae9d81f358743140dc6f45d86c74b13388db40bcfb030e05dd5ae9b210d4b89b4cb5d2d1"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x404c000) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0xe, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/mdstat\x00', 0x0, 0x0) sync_file_range(r5, 0xdbb1, 0xc7b0, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000c80)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000cc0)={0x0, 0x5, "2dec99fcf2"}, &(0x7f0000000d00)=0xd) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d40)={r6, 0x200}, &(0x7f0000000d80)=0x8) write$sndseq(r5, &(0x7f0000000ec0)=[{0xfc, 0x84, 0x1, 0x2, @tick=0xc, {0xa, 0xfe}, {0xf9, 0x3}, @result={0xe4, 0xe72}}, {0x6, 0xbe, 0x0, 0x1, @time={0xfff, 0x2}, {0x2, 0x1}, {0x8, 0xa}, @ext={0x8d, &(0x7f0000000dc0)="e91121117ddbb5463786e1df69f49b218860064fccf3dc080ad59fca5a7cc0cbd0b7d378093735467acfb47d85649c7ed95674ae56c223c4a82169b786565e7c1747c9eba4d0e2110fb379aac25ad4859c51cd0c721b592e84ccdc6581840db263a9284f9145f42709ab5e61095002d5eaeacffcca8cf5a1570a32c53a45178296abc1f94b393ce8b63d27efc2"}}, {0x4f, 0x1, 0xe4, 0x1, @tick=0xe7, {0x90, 0xcc}, {0x8, 0x9}, @control={0x1, 0x7, 0x7}}, {0x81, 0x8, 0x10, 0x6, @tick=0x10001, {0x80, 0x7}, {0x7, 0x6}, @ext={0x15, &(0x7f0000000e80)="2878f8bdc61f55f6cac5dcc7862f73ee710bb87c27"}}, {0x9, 0x5, 0xb7, 0xb0, @tick=0x8000, {0x4, 0x9}, {0xfe, 0x4}, @queue={0x9, {0xfff, 0xc9}}}, {0x5, 0x8, 0x9, 0x7, @tick=0x7, {0x7f, 0x4}, {0x9, 0x7}, @queue={0x0, {0x0, 0x7}}}, {0x2, 0x5, 0x97, 0x7, @tick=0x3, {0x7, 0x6}, {0x40, 0x4}, @addr={0x0, 0xff}}], 0xc4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c050}, 0x800) r9 = creat(&(0x7f0000001180)='./file0\x00', 0x130) socket$netlink(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r9, &(0x7f00000016c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000001680)={&(0x7f0000001200)={0x478, 0x15, 0x20, 0x70bd2d, 0x25dfdbfb, {0x22, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8d2b01096fd62f0a9bf0e51a18dc529b0fa4a9f498131d58e80957251f5ee72dbb20232330a0f45fab979365c77f6e4518c416df438fbfbd1d5be988df77e1f290565d62fc5facf0b1a4a18c79602794c2f54259c3799255145c07ea59cc02b03b3d29d0fdd35ac1a6b1505c6b5ab79e94ab9766907918358f6a83fe1d57cea5ece2a5a9fbb2f0b03a67c2807f07428314a41cf52935826855e0403de04f31cdea62e91abb47fceea280bee88045c98f42cfbf9fb7dc32216d4cb8b3ef86bc30944d8f07ca408ff6d02ff3978cfa97deb02a02bf94b7efcdd5ef1bb1df"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "2f9657b408a6a077c368e6e990b0f4040f8702f560efb681fe700b95a249de8a7d0d50c3ce4174fc5b689934b3e215e2a7988c5d468fe74cf5c2e439842e9e7e1b21753a7a064114263766a2b22027a35cbd491dcd44c735ebc2fbbfeb330a51a6b13cd26a266717ed023b80fe41351c0b4174b4a8aec3111f7c0a1fc968cca3867951d4a60be271330c4d420a51c8c308cb1246b56c553ba8daef9cf0313e003216463bdb4c86be448049d422c632910932cd87c290675fda0edf37541261215dd337abae673f1513114402170358483d32f92f3d0cd2c3381333791c6fa50f9218344ddfee1ddee0987ae275"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "c4e20cdbd8031216ee0f514402772ac0ac3167c76a3cf861b28f59ca501e040d0177006fcbc5c2324cf1ca2138f2d09db6c5f16858cfe9952f4dd9bdaa238edc8e1e9a2093c9bfcb050448b16c4f21a1b31c925aae77bae736fc533f07ae"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "43415f00343cdb90aa6e5e420769893af386bcc9f15a3da699300390a7306ebe36a1cde2190e2a423e8ce1717e4f9893de2afbcea62f6d12c13c9997aabdaf63089092f47afe2b74ecf4a8c071f24dffba02274935b4b5481d44c2d5045836350e9ebb613c657824948d69dfbd396732f3d83b3674fa4955"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "0a6f296fdf13f43d552c2946108dbad5ee5d2e2f93cad20dc7060ca00b316add4a721cfc386620cf574295d76f9f0eff4acf5c570a559903b36d392cacad280211a8044a8c292f9df143e50b6601fba4f7be584b0b8cc18ec189c0f0ce02be2411aa1c4756a6c5c49b68c475641ed35f4d8eb820c457aab52f4b710007106f880cad0c8e7063fd8150416e9d06b7044fc3723bac274891e530df9f327153a3f6200b396392516b3a38c724a780c65ee8a46a199e3a0196fb230cead7193fb7"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "3453d4ceec2ee2b1d311b0fec38a3f"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "d1aa3dc58eb5b982eb7cfde73469bf07eecf80943f2bbf4e2311d93c607d9a952fd6021d876bfc795170e35affddc7eddb3436ac0c98a27ca236bc211e46061835f4585642262a2905091e2fbb034bc73922e7470cb66309b69c460c88e601e94cc8a4f7629f66aaa96a3741a9ac64d5cb0d63585b8f4227bb158f8f4132f63a811804953e0877bbf76c7e84a83034d11bd9241ce2ad41f08ab4c2381b62b0762573d32801df3b2691ca36b266fbf931c29cc0b442d74f76ea04ef23f3574ca16072aa082e04bf8f38fede733a5b06"}]}, 0x478}, 0x1, 0x0, 0x0, 0x20008009}, 0x44) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 5m11.02203224s ago: executing program 3 (id=5311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x41b0}], 0x1, 0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) write$tun(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0003110004000000a60caa0115ca418d60007b81f0df972702b66edbe69f9db68cc27e1b8c14eff43b6de44ada3f046444962952c2fdc3bb07efd615ac617713e6e22729e3ee4d7755d461802a52f3a9d08afa7455f417bcb7075c1ba7cf1b811aa5417217110e7a737187ef42d04235b8e5b1df7cadfda216c343bfe35bc8457d566c9a5d66eac118aafdb1665a1e1259f96169c71eb403e4fe451c087c564c483949abb7b47c544c0f61c09af7f98c2f7da263d3d76cbb87baf621654f9eea4c625d72f23a25047930e6f60dbd9fa84daaa8c9dd39b3ae51801c72bdd44679cc7ca3da7b1b42be14ae8adf79dd4e23a900e244e16e14a979c8d3698bc5717eef4e482abeedb1c991577d02267b06c6bdd05cc9880df9c5d677f44105226eaa51a3dfb50f3d19f7b167def28c1af0d5aaffc1aa5a44dfe640097f447feb9cd4cb4bc72fb6ebfaba35974b519db63a89139eaab6ae5e471a3e9bda6aed08c20499753943a4e938fd45fc8a4609eb557c7d3ae813dcdd91154ba119b006b3932b8f3ce659141582131c371d21ab34b9f3701e10"], 0x1016) 5m10.812508996s ago: executing program 3 (id=5313): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sync_file_range(r0, 0x1, 0x9, 0xd) syz_open_dev$hidraw(&(0x7f0000000080), 0x101, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) openat2(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x2d00, 0x154}, 0x18) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0192"], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000009104"]) syz_usb_connect(0x3, 0x1cb, &(0x7f00000000c0)=ANY=[], 0x0) 4m55.758556083s ago: executing program 41 (id=5313): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sync_file_range(r0, 0x1, 0x9, 0xd) syz_open_dev$hidraw(&(0x7f0000000080), 0x101, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) openat2(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x2d00, 0x154}, 0x18) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0192"], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000009104"]) syz_usb_connect(0x3, 0x1cb, &(0x7f00000000c0)=ANY=[], 0x0) 4m51.507808028s ago: executing program 4 (id=5393): r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xaa, 0x8e, 0xab, 0x20, 0x19d2, 0x1112, 0x31ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x1d, 0x2, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0xba, 0x0, 0x0, [@generic={0x14, 0x22, "43a6e86937d34bece002ada1ec9985cefe18"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4m48.402034286s ago: executing program 4 (id=5399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2000000000e2047c787a0cc2be314f8c190a797a310000000014000000020a05000000000534000000140a030000004d3a76f1057c1568d0a608000340000000001900010073797a31000000000900020073797a3000000000140000001100010000000000000000000000000a430d42bbee35dd684bb1e9a652000000000000000000000000000000000000000000dc9f0222b81848af2b0d643bcdaf6b712a0030b9308796319b78a536a98eabc963e9a553c3e01445ed36280eb1b8e42a4aff2f71175ccd0ed0ca5179ee7e6931b4561cc2ab6639bc57b62c3a5b142619e6129b"], 0x90}}, 0x0) mount(&(0x7f00000014c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vxfs\x00', 0x0, 0x0) 4m48.17592296s ago: executing program 4 (id=5402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="034175746800000001000000de07000003000000290500000300000002000000ffffffff000000000000000000000000010000000000000004000000ff03000002000000ff"]) 4m48.0105745s ago: executing program 4 (id=5404): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) 4m44.789727205s ago: executing program 4 (id=5424): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x808000, &(0x7f0000000100)={'trans=unix,', {[{@cache_fscache}], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@uid_gt={'uid>', r1}}, {@measure}, {@dont_appraise}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise}]}}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f00000004c0)=""/99, 0x63}], 0x4}}, {{&(0x7f0000000580)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/88, 0x58}], 0x1, &(0x7f00000006c0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000016c0)=""/118, 0x76}, {&(0x7f0000001740)=""/78, 0x4e}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/212, 0xd4}, {&(0x7f0000001980)=""/46, 0x2e}, {&(0x7f00000019c0)=""/5, 0x5}], 0x6, &(0x7f0000001a80)=""/22, 0x16}}, {{&(0x7f0000001ac0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/195, 0xc3}], 0x1, &(0x7f0000001c80)=""/36, 0x24}, 0x5}, {{&(0x7f0000001cc0)=@qipcrtr, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/21, 0x15}, {&(0x7f0000002d80)=""/105, 0x69}, {&(0x7f0000002e00)=""/40, 0x28}, {&(0x7f0000002e40)=""/52, 0x34}], 0x5, &(0x7f0000002f00)=""/35, 0x23}, 0xfffffff0}, {{&(0x7f0000002f40)=@tipc=@id, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002fc0)=""/129, 0x81}, {&(0x7f0000003080)=""/225, 0xe1}, {&(0x7f0000003180)=""/45, 0x2d}], 0x3, &(0x7f0000003200)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/166, 0xa6}, {&(0x7f0000004340)=""/14, 0xe}, {&(0x7f0000004380)=""/42, 0x2a}, {&(0x7f00000043c0)=""/125, 0x7d}, {&(0x7f0000004440)=""/1, 0x1}], 0x5, &(0x7f0000004500)=""/65, 0x41}, 0x4}, {{&(0x7f0000004580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004600)=""/124, 0x7c}], 0x1, &(0x7f00000046c0)=""/42, 0x2a}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000004700)=""/158, 0x9e}, {&(0x7f00000047c0)=""/168, 0xa8}], 0x2, &(0x7f00000048c0)=""/46, 0x2e}, 0x600}, {{&(0x7f0000004900)=@caif=@dgm, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004980)=""/204, 0xcc}, {&(0x7f0000004a80)=""/92, 0x5c}], 0x2, &(0x7f0000004b40)=""/4096, 0x1000}, 0xb}], 0xa, 0x40000000, &(0x7f0000005dc0)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000005e00)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000005e40)={{0x3, 0xa7}, 'port0\x00', 0x20, 0x40400, 0xa5e, 0x0, 0x6e, 0x8362, 0x1, 0x0, 0x1, 0x4}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000005f00)={0x0, 0x0, 0x0, @lost_msgs}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000005f80)=0x7, &(0x7f0000005fc0)=0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000006000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) write(r3, &(0x7f0000006080)="b81cdcb41bb9962e352503768cc1bd0730c879144aa63ca18c976da3cbe0dfcb5ddbfa33a62d6755d49c060c0444fe50ebbd9bd561f8da6d0c652de5f3f96b009099b84c94cf3dd87109de0e4c06c2b09b66ca5bad2d1c061467a6727358c713c573bc53ff2af6862e924efaafff8aae4191457b3c8fcd61cd13d6262136e6040008e24dcc058899751dc86e142771be35f17eb1aaa370263979ad7323557e1618a665c8f852eb4ebc78ea261cafa8a84906075ac37e36b6bae7ac088518bd04dc1ed081b9516cadf6e79dcd8f30c12f53b89d07e04673c587e56e04aa5af5cc5d79ed674e96de0bf175a6a071324f8a2e9072ddf115450ba5df414f017db9fdbad157fe3fc6813798f57dcee88b9ec0d08c431ae2ddf29c61f525195aeb7248e05fbd73bba71aac054f9b0887f01a912a936acb019d94ed7350bdeb2196ad67c959e59dea9522d6ad302d26cf73881f8f1afa28051bd56d8ef3c1f4f0ecf7ef88fb68a5f2856ea8f0bfead2f01576c79ade193c000ebd85b131e1cb8a8100b27838d3ac272ed580c4e1977659d74e6d4b7d69bfd3f74135562462636f214c01bcd38f0b5905f30e542cb7e33a2f3e4db51bc7ea333969b84edad52e4661dc0615954b7ffda9f5eec5cc987efc6a5a4d18ec57e0440ed7e719e6e35e51e3bc55082e100bdf23684ea42c99fb328dab6f148d1adb6106b5f4d05b28b4245906c8df76308443cb2a46d550cb949df9438ed8d93777cfc33bf9e3d14e46488f3bccfbd1b0c82b49028b46f5a7a44195664ad4b717d013f1c56f2a42fb81eb7f211b7a996c82e358ea1d7f78bcb0b2a8eaf73be4dcd33edeb767aa2cd8722bdbcd403c6cce16e19b4a0b9291694eb5adf327b8020fb24c2e27fb3f5d62b6b3d0e1d3a39412c06a68639122b73de51089d1ec6f130d35a4019be1e6f1c68a6fc4d8df0604c9fe8e10cfb23e3432af6a31d1e867872e3d38760c0876fa9e2a3b014203c0726ec7142ac0984a9dd5842ed00f1d985b11870fca0bc2019bf2bab5e36e5a55fb3a24e5cda74d04e254f885c3a2f24687dfbbae5049a1c751a0bc51b0a3c4157955122d4d55716dbb814564cc014fcee7d1f4027981e52d815950ac5afe20ada95bf0c83c7032e0819edd7609bf8e8499d8900f9e0e8a70b5f951fe3661c4c4c11e6567f2fcb7e4d0e36cb33a0950abec775e9728648ffcc0c7bd2d6ba6a4c992e21c9abf154f5d27fbc0fdc99c9ecd7f87b1f3d438ac00b8abc43a28f6d4877675ca5a66db2c4adb66e9a7cd610c660d60135dff56d7e2e0a35f7bbef09b4655b0f7cbc7d74812131896fdf7e468f9012dce1a647e5da5ff28239b61215ae3d02c21c2a71ffcc761cc8e40b2c9dde2daaf6fd5d1af71c92b685f062f8287566c0738b6e44bcfa398124b910350bad8bfba0d1c2602fe716645c319d2c45ec5d69339c1a15e9dcd7e34daec8ffe59e0dd63894c9705a34b42eac7a640d317e51a66ce9df76746b1c60055ba06a8160d05899fffa0238a18c4dff0c1335fc8bd95a4b8b477ecb2b60ab12cdfaaa67551de9d806c1ce6cd120d8407c5b903e8c6dc70ba29c26f39e0c75564b771fa7f7e000ab2dfd6b8f921ab6e434f3896976f7d48b2fbf6607fa1a75cec59a073ca8c9f4789bb1fd5056f455d5269c8e9dca6d38f436b481cd54f9e90550865b52c802329efd6822f8275eb854471ca3820d4c8180f6a656f11ef0f4eded08f89d95df283784feaa25e592a187f5e22856c71f49a19d73963d229071179e9d81bf29b63a1ac3951c631c16a2382106ae256bea1be491eebd84132a415aff4ebba2ce5f313ccafcdaad5976ba870dc2f93becb4ea578b30c2f4f4020c71897b65e6c72f6a27698a8b969e2a381b5382861fe1248296e6da6ed276c6cbc64b46325a5509d505308fd19b30457c702dd836fbcefa7f1cacdc18e53889452e8d4c609d1d098d07333aaa79cbb3a1801bfb592a829d9f1d2ee5008997abf89e44d0fc71b31480e57500980d0349bf95b23ba64378cab05ae7cb8d7bad552b2108c731994c81d32276ccfd81995175cbec1ae0a7fbf633fc3afebd28caa70ab830e0e68059f5c790be3a3116fc99ad38807c664104fd3bdddde2a16ed3abf14bf4dc02eec7ad207f8192e1045b2cc668c37d97361474c5b6c73119ad845d900207af4d2dc58ec70d8ae9d497e415bc7b11016469dfc1214d673cec9713764fae822a60c75997bbe7a49637df97ba980cd471a3db4d97a2f585ae4785d02f4ef12b989e33abdcc5646946fa45f8eb22fd63779c1eb7ce3d611f4679ae7323932b392dbdd4f9a53303d61d265da96725bf929a8deeeec36666e6a9bf15963bb90d20868cca0adb379f07211da205e59b04a18acd784b0d600c2cf3dbc37dbe5c8d906c930b615292b72cb6286e9c75a5a77ca8f5ce07139d85beadb09b9e1eb7c1330bc2e887fc9151f9968e5f33818b4fbbba4a6d882e70e75024322b31726872d297a91f0b0965d79fdb42f863397117e88369cd5bf0a167341360360e443226ef1ed05f484703b32efa2940fc3ca1d72ebb215a7a470fcdb3d1dae388e8f3998419af0a3907f8a64c0162d229c4fe3590aa8127e69339596b3ad35a7008c2269a6630cd8187a2669aa201539c82577007d9be0a1db7c1675316db0d703a46124c2f1a5a7de90af86df9e3d3253daaa0fe22599a89e3fcbe4499122a6fb5d8bf3af881450e58eacff162405d3fce471c9fb6a66dee8d722e6975f39468d1abe64ad3e522822012909bfe9f1c18fa2e8a55c7586205d07f4f83459b60e7d1a432e3ed3612c7841ad0c069278c4f3f9ed3cc9c2645862709b036fa2015fb2c1fd010a82bfd720913f5f7e8314574e1082abe88db11e9bb545d932d46f05d8e5a89ef2a1cb65f3f2328243195099774101e41dfc6cc457c433ea1dc12f3e806f4d2c8054b8b4031e7cdf7e4f8d78d36217405fa5ab40764e5d698ed70368e2b10e311939948d50712caec4c4f2e87367195a431ac4542474e79a7a44f95a13c846f1f54f77388e4c54c4127bebf232cb55723b088ea2baf3662254a81074964dc3ccb5ee9a32235cb91548c78a9d507c2bd20ded3cedca14e707e38f8208c8ecf72a52dea423ab3f1db7563cbec7f8bdf1f5dd6f29ce0bf8121e715ad023fac1557a8039c420738e4456ca99334c80d9136dd71cc14d63deaf17a7f7ebdc8084ccf6a49663120bdc610d1549c360b9630c15aee20770ae21530e9c3bbbef3d16e988751844c748c627103bb8be365f335c722e4e813c9fcb4d1c5e4cd33184f45531a04c84eb8d6ce4cd5203b56756346a09d0262c3b9c12937e23a102a49f5b8f40baf0955bd6d3c85a1ebe5e36fff42f9768b60e549766e56de5c724d72b96d60b47490e49c460a6d73c0f53bd25313b31a30af61ca98a2892e2c1b47a816c63970c2bac1f214558273882cbadc37aa6ce75c86c0466b8f36dc27d6e8b2a72e5d2351ac65568f17d9128f9c84a2e3fec74c63380809fc2b44f240713c26c5ae2b3e68317085eba7ef1bdae8c23fda4d0389f19e2625f3f738ee7ec402eaa0bccc3f5eb6da7dc10dec63cadcbe8c1f14dc7600a754ce92dc3f86d4f90507a77c7b954000a2971d72b12f78efc4a9225bb46fdfb38a1ce3cbe5b69f2c73c51a2619b45907bf97e4cd753afd711c62b71301ef405a4e75c2970536f546268295336758c90fe4dccdb71120138f851b4210677ce6c0f30101cacfa2f8dc4361ba8932139331b0246c9e9288735609c182c7af307b30e650ef84bc4996c4dd42c735dbc855bbff93a256aa6e26f3988dc98adc23cb76b236d7eaee7ff3ceaae5ed2abc0080955bd769367b731b565e2f244cc29ecfa6eebc9508bf8d52254db137430e2c33e6c0ecdf486c6ca10f9468dc2cd1dbc7525d1fcc5ddd39ace222370c17186263a4c06bf1954bb56728a90aad5dedab032d938bbc318c255beb594d5b81ba0a6052e208b07e41a352b17890e6c6ca5297dce152284f59c6dc8b1f70be7a03c7fc21cac2f139289f59d3e4715651038b807deded82e637f4b9ab3914af768d4b55818afc3bd36869d32b41ccb3669e4589401ac6e1fea0e4dbc2836689ea97c90123357f7372ce8b3edc42369781ac270ba70bacd93e647755a66e5906d5e1b408b9f9bd2f2c69dc74ed4a308977d2de2b2975b0bcda48e48e414d8e36bd868b3d11342f635d9cda55d72e9a28e691377175ded235b014c7f558c9078c94f1472fa44334b7028c80729df790d4ea6d4ecba5a1599f58769887f8a7ab3f059da496994471754ed1655657be59d178fe64e933fb3bfb2861639c5feb50390a714f57687422a385440bb1e09e3d3c22de1d32686cee23f56092149ed83e3f020532841862dd0a176b34af9ebaf9bdc20405562257beba3a27a7635cce953e228052426aebaefb7f5a02c1783748298bfc9df2aa401dd87b6a3d52d832f9392efbde462be72849932e29c4a06ba5c23e4a777c9b40294b69396da7a2a15c6cb136052ebb4ef06a4e7961e86219257c08c5320e473fbc5424635f22ab6fef63e0d09bee1ff63377ddfa5c64135c9faeae3a7d4c302235ea330085a69948d9236b0a2479319a3b70c838981e0f1a5bdf3bc56c78160522c9635c13454fd0ced6a0b2c30abb4943a039c69d8c207671361b39592b48c02c6c53bec523f14dab748d897efa450b546276ab7cc9fa7f1f9d0ba940e63615193b5302a6210fa1d5804a4f11f3f3554c36906211a1b907b45b10eddc94e1382f3ae7410816c1c5c700d63467aa269e4953f5ef9ed00c677bf32bdd837fe5e697d07794b5fe2ab582d9e3865ce0d4b2f09c2a1ebcfecb6919c0038193bb378e0f779359faa4d4212a2fc5f646a9375e316273f883319c23f7ad604cc6730ca8d1e6a243330d2186c89bf9541ab399437b9fbc8e368a74682346022659ebf8d6d82218c2d62ef779d67a46673b9081afa5b8b8ce3f61e8dfe06acf8215db74ee6379e54f9e3e8c581121c0efce2661c3245f234fd1009f706a46a98eedec707c062de91e54eed9aebd2ecc96767a5f783389f93e149c529b769215c4fae4c9274104773e90d583020ba48e42d8f5397adc2bb7e37534289076cffd990ab7a54ce4a4ad28ea0a596436c9e8b57465e952ad7e0c5c976fc51b97300f3b2daba5528971b5697beebb6ca086746b24fbf4188a2d247356968c67f1a5a800c8c55db2d6e60ccc235bd709a82bc54605ac1e049816d2d7f9895fcddefc23cb5c78f0f6187b8a2b6beff021622a2dc29f216eaba44130a514ab4479b044988746b503a71be6f9f9e11ecd6da15241d07c75c321107b504287869a9d4c14c4cde3d6d0bafb0ee21665e203354c91a0c4a0d12a6558b1e34737f057a1c429f6f2fe15562e1758b282727c707ee45b17356cfde2a3e3d4284582684b695d6b5939e2a69c9562668a8ed4bde53bbed1ac3a3e3c8f0498194d0f5cafefeed13779facaeefa6c343f77db38c514e7772772b093c5f0e8fd2e6b4ab50a80ca9a41f331e0cd2605bf012cd17088ad709024c98e3572b6f9b5001d3223666dcaf9bc2fb5516b111d43ed3fcaa4564851e84be4b9f4bc1aa9f977581e6dec538b54c91991daf6d44d4f7f57eaeecb5f16dea5309b7573074a4a1e5b18fb68476c248df7b1327518068c1be5f6933f60d74393dae5782b67f44345f5b6e8ac87e72da4d3d58ba403c298b3c54ae76ba7c4cd021b0b672b25121d6f07654802060ad2acee6747bd7a0c5", 0x1000) sendmsg$kcm(r0, &(0x7f0000007500)={0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000007080)="3e6f91ce6e493b4e681611165d4bad60ca6fe6479e211e393d294da7456324e1b24c9f0bd8dc5967e53b215b31ae27e8d68db4dd8f80100922748113cb22ebb578f48dbc8457f2e10a650ad14320716e64cb0399eb93df966e879bc3045699fa83f317dc3241402a5f9c4730e9a080e3c3ebe07b668796f87ff08aa8ad5ed390bd0b4feccf6cf11e5d4ff61aa090f4ea6a03228c7408a454d8e8e07b44971bb4bcbff5ab3d6f656dde05e471ad590bc0f87d707a6d4f7f298e91cad368da223a09f4c9d2f97527ceb9493aac5ee4eea40022902cfb63002f2eae971a9b", 0xdd}, {&(0x7f0000007180)="b8bced4473986c0e0dd777468114d8d978a635548336825007f7d98a6592e5d8ca009c198d32764d644c4c6ba3e74b8b7cdc817da4485e5f6c6fde6e486f536364f3e850f172e36a861b66bab2f414130219abbf3f2da67374304833028639461c490db958acc2af795155d675ad9777de9f1c54c4739ca3556134e8fc825db3f3bdf2874f806994290db1048d5a7c02a3703ff530ed2f", 0x97}], 0x2, &(0x7f0000007280)=[{0xa8, 0x118, 0x7fffffff, "2c9e7a4e70a1cb0d7197a03a47de6849678c56293062da9e1553ca981eadc488f6f5b3dc9f872e81d4c880824772b206c15c0fe149a90d941bb3d6571dea4124e3a87ce53d19f637b33a2d5718f9e61a5994fc57fd7c6325e7005564b0af91c94c5d055f6f81b31667a8a336e183bf18c42fa7ba26b5be8b085dbacb457f62cb1b1e2a0ace53a33734349226016cb3fbbbcf03eae71baa"}, {0xc0, 0x104, 0xf7f, "72fa90b71269a3cc3d43051a3c8d190cd3cb048a569acb20ed577459e8ac20d3c746e998818fa52b5c899a9094bacb63918ad5e76f6d8a9dffc204ba67779134aae22823da0490a96dbaa6bd76b4f668b13b2f4e427c18d1895515950f5eb0bd481bf8a36996455f8a5ebd82193f6a9d39261ac09b2e1cf82d28e8cd5438d0769a9fc7a6a2ae3f5d77b41c4b23baf909759a0a2198b1fac2c371d14e4df146af622c6cf974961a5dee16"}, {0x18, 0x10c, 0x7, "86"}, {0xf8, 0x114, 0x22d1, "664873755e0904887aa9c7a19d7a233e730c12e6129c4e61c4fc36dc01c6e7ae3bfb83ca094a6e0ef496ee87042d095d9701072e084ed025fc36682de8d98b1ccd761762acfc46525a34dfc5a96809b34da557dd3b384c50dc92830f2de5ad43aabfab1d02a33d5f6b327211b2b8a010ea359b1cd8a1a9ede7ddff5db2ae1c07b268ec12d3fc5f2e7498d5c001870d461b0b2af6038dd840c2243166eb7cc43e49fa02bc4577fcc946de426036f78e3741b123eff2213ad70ed7efb51734b105b9dceff28f95d17d4a023c3452d44d92849929fec0c70cde29fd27475486773d7b618ee1e8f2"}], 0x278}, 0x20048010) r4 = dup(r0) mount$binder(0x0, &(0x7f0000007540)='./file0\x00', &(0x7f0000007580), 0x4, &(0x7f00000075c0)={[{@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0xfffffffeffffffff}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x26}}]}) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000007640)={0x0, 0x0, 0x0, @lost_msgs}) sendmsg(r4, &(0x7f0000007c00)={&(0x7f00000076c0)=@xdp={0x2c, 0x1, r2, 0x10}, 0x80, &(0x7f0000007880)=[{&(0x7f0000007740)="0b393e36e3a3384c077976638206097a8a5d7de006", 0x15}, {&(0x7f0000007780)="1ec7c21d4455a5a9b6e0ea45ce5902f319b1e829f6a8fcf39eb78032fc17c45985aef7344692f27d503d3d3ab6814e95e3c623a99dec56b2f2fe16287ce127b9d1564e4b7b", 0x45}, {&(0x7f0000007800)="c8a25346a20a987427678df251998be5c19470df34fc706c892ad36c7a6eca54ddf490f990b5c680f7795f6a3e07b36e337e1a5a94c91b4abcf4b39aceb57ec6d63ac613ed96447775b52008796080d4f792de3704b7cc29aafa708348281aaf396a6618db2fca3ec5354f57", 0x6c}], 0x3, &(0x7f00000078c0)=[{0xe0, 0x6, 0xe3, "fd5ebd427df1ed8c94f325c7b0dbc8a87e596bfaf2c6be0a134aa3f976432b8618e408b96559d7b958698f2c2ddc5b290d1fbc614ce83a051d91de34cfd282c0d290faa0681261aae963f4d94c4dcf10ed6a52db11e4c9c3d0ea26790a7b5ee470480231d36360e83cb0646ab162ea2f81976e8500606b22e7fa2b0e4001c8c6e7fc58892404b1cfc88dcc5c54ed2ff0f568a3a86b26550263a9bc00613a3a89517f0e24ba8295f8ec7b187c97802d6044bb30ee8644df0cbeceffc082b4bed767084d92b194b512e8"}, {0xd8, 0x118, 0x1, "56b68c51fbc5f25020666844b5d9f7aa82112be4b384963b6652a9ba378f275118d781beec9019ab2bcca61e4175fe2c6afe25e18df2333d7c43707928c6abf58e6c57b86910703bbeee8b2c3f5aff172e628f2cae3199465e0c82d73854a4647915099bfc62fd7dcab9c209e0776242de6d640de5d9985acd06aaba764c658196b33cd87ece2973c607ab94d146d7eae30dd10f2dff82eef446878ebb7280e6ba6b12978b055ccb5ab23e21a827e6ac7abf3f964ec61f463387b6644bccf176e2e6a1e4"}, {0x80, 0x10c, 0x820, "235b659dd6b2496330314d73acdc3ab49110b1d49d2b8eb474f23739802bc47e968e0c63e286a55d5bc4beba4090c8bd31f30f85dc22bbf76291a0128df80ad3f4065d667787f45a954f65dc6c17820b19b0f503c590261534a5597c2f0c677a4ea1569aa3a52c115c4929"}, {0xe0, 0x11, 0xffff458c, "c8336ba5ff55e8b1730f93a6a0dbd30ec040c63065fdc2f1587c0520606f549de37b22772b2d3c4200081aa8371404554629df5ffca788bad73673b8d40aa8ff88a0c86c72f3f024a1cf54122ab1d2dcaaccdc2278a37c6437710da6a07b394b1443cceff59488f8370d682fc8e448f962f944b4e0a4531506097736dbc792def5484ccd1a20791f38f327f9df9775233e52193c0d82dfa851112dd478347f460f3d23f141751b86ff15be360b61bc3ae097e66590ba1ba3e44f6c45571c47df44419785bfc06cdaca52ac"}], 0x318}, 0xc000) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000007c40)) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000007c80)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000007cc0)={'veth0_to_bond\x00'}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000007d00)=0x4, 0x4) timer_create(0x7, &(0x7f0000007e80)={0x0, 0x2c, 0x4, @thr={&(0x7f0000007d40)="f44bc7a164159a12b39547b2872c1fa167b290d65809e91e4a90a6647e037b27b7d1933923cb2b515f3963c99915574109d9ddaeb1dfb0ce0fae1242df356cd67b0dbcbf0188e70fa9624b04f44e55af3f2eed725f41bb40ede0910ac2b65e6fdf1d4c3b725abfc080c39c5d5d451bcdc71af78ee681cbccc46dd1c97b83f54e8019bffb77252fe0cca0545fefea59a6c8284d0dd0cdc521bee51db8db7b7977e5ac85d6ed", &(0x7f0000007e00)="9a3936cefe2e8028f9c32692ab8ff1d6c6f186dd90d1d31f70689c3b99101115f2aff9890966d1a33f8aa869659d29fa327992295673c6f282024680839dc2b4bfc8371ed74ce6b2"}}, &(0x7f0000007ec0)) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000007f00)=@gcm_128={{0x304}, "fe43744e13d37ab7", "bfa441cb66f43cb04759eec3e293949a", "2a79fe36", "b913c4661cfb9d0e"}, 0x28) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000007f80)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007f40)}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000007fc0)={0x0, 0x0, 0x0, @lost_msgs}) fspick(r0, &(0x7f0000008040)='./file1\x00', 0x1) syz_io_uring_setup(0x1ce0, &(0x7f0000008080)={0x0, 0xadfd, 0x8000, 0x0, 0x176, 0x0, r0}, &(0x7f0000008100)=0x0, &(0x7f0000008140)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x24010, r4, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000082c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000008180), &(0x7f0000008280)='./file1\x00', 0x800, 0x1000, 0x1fe667ed6df463e7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000008300), r0) recvmsg$can_raw(r4, &(0x7f00000095c0)={&(0x7f0000008340)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000009480)=[{&(0x7f00000083c0)=""/170, 0xaa}, {&(0x7f0000008480)=""/4096, 0x1000}], 0x2, &(0x7f00000094c0)=""/223, 0xdf}, 0x42) 4m40.949114425s ago: executing program 4 (id=5437): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x400, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x401}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x19181000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x59) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./bus\x00') r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000540), 0x0) unlink(&(0x7f0000000040)='./bus\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m40.320172325s ago: executing program 42 (id=5437): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x400, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x401}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x19181000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x59) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./bus\x00') r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000540), 0x0) unlink(&(0x7f0000000040)='./bus\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m43.31725767s ago: executing program 1 (id=6025): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x4, 0x6d, {{0x45, 0x4, 0x0, 0x15, 0x114, 0x68, 0x0, 0xf, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x1b, 0x96, [@remote, @multicast2, @empty, @empty, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf9}, {@multicast1, 0xb729}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffc01}]}, @cipso={0x86, 0x4e, 0x3, [{0x7, 0x8, "4a5383d72493"}, {0x1, 0x5, "4a379f"}, {0x6, 0x10, "7a2e6576ed409263f3d17a9a07fb"}, {0x6, 0xb, "bc2de87b1e399c6750"}, {0x7, 0xf, "e705a066617df2ce0d8d5c5e69"}, {0x0, 0x11, "1de76c6f98f24efb5541c8d949b649"}]}, @rr={0x7, 0x1f, 0x33, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @multicast1, @broadcast]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xd, 0x3, 0x4, [{@private=0xa010102, 0x306}, {@broadcast, 0x2}, {@broadcast, 0x84c}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xfffffff9}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8}]}]}}}}}) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000600)="002ec56be0d52f355b3adf", 0xb}], 0x1, 0x528, 0x5, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000180)={0x2c, 0x3, r0, 0x1}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000300)="b4a521723cd2b854558f51967f2959d28ff69d9714d2055eb3025cd131affb3f962ba567f1602fc4421ac111fabbe095534a95568bbeb3f5df86ce78c4f52d698f9ce858353384820cc34a19620dba358b9c74a56d86613f1d9599965a2cf7770afc601a176cbf4595f7710312180c4d523203576b478918870baf23b3cd7f90966bf4fa38b42345b338d285a2073709d07bf8fca97299035b85415ec81142e59c09916d960462b080b69f30a2fe91fbec15dd174b12c7a95cfff5557dc9ef5414e6e38a5727695516415b741d75581a2730232bef533bcf126994eee92e8bd5ad4501455525bc7864719dfa0e62b1", 0xef}, {&(0x7f0000000400)="d7dadd56468641361277c1f9a92b597fe1d5c954cd313987a2e96f6f5271bb04b36e2916052a81d7625df3b0f182dd0a5358d5895d0d9701b7efbc8864be01d01666ff172f73d444f62793ee298e42dc8cefe768bca6b5b40ba1d2d47061dd3ff872dd6c4f211b87747a85f9005d56125d718e60850c75d42d12975126caf38ba9dc2264ea87e51e79b077858a162fe650a5110f88a1105739d9fd4583e50762c3c005e26c7b90da566473d36097c4440afd38dce5cb92e63ba648e3a913e587a8ab680509d8610e18a0166829f3410334ac2488ccf491929c6e62cccd0d26a5eb8a663e0528f85107235baa", 0xec}, {&(0x7f00000001c0)="2a8a84798035a43831792713d0b5c650810c0c6aa25c13dd23b50d21f86ac658f3984975dcb1d00798ded5b00261122bfd819738e4b1cdb068222ab66a62bc6c9b3e1c96d1272090901be201b0b4c0368a414c2f1f58845c9b2d676de5dfac7b768f", 0x62}, {&(0x7f0000000500)="ffccb736f15c7d0e573ede3494abfd4a07fea02d7da2c426c42507ffb2354596c1a5b16c1ef4a4decb9053f4aa714393be390ed1a65ec19390bdf699f29b3d52282ca1a630736c581bde60c43cdb64c5056728ded0fdce2aaf1381efbaf9f38965783edbf3b9722d09eb3439e97883991b02602b7c96d23f5ab40f46a1bf18274b9f", 0x82}, {&(0x7f0000001840)="2ab823b67c25445a9ff4aea1540040b54f3b95888b68738125e634281aa2038ae6c2fb064e71bf35204d17d4a2b394dc28f0c177b39832aea9c399f3f1584d352afd825560a6642b3b65d2a5c41414e8f56452139b370900500a965529411369508f950cd49192d25ab51706a96d9a36123bb790b8aa0b0a0f470c6a7c2afd3a9873202dd10592b3823e7e34f1b7690e4d12a67ee8df1b4f00087f00998193b299d771a73c19e4b5b406a1add7e32beee8acd6b16ff2f305f3978b1b40f4c7828002a624be7d6d1ad7151569d398e3ef2c619c3d2c99fc5ba7f3204539da92e1b850ae29", 0xe4}, {&(0x7f00000005c0)="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", 0x1000}], 0x6, 0x0, 0x0, 0x4040881}, 0x140b4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0xffffffff, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r3, 0xfffff229, 0x2, &(0x7f0000000080)="80ae018e4c0c7b62f4b20b699c83d27c2dc0b4c3b6cb33bc1f", 0x19) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001680), 0x8000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x4003) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r6, &(0x7f0000000040)=""/27, 0x1b) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000016c0), 0x4) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) 2m43.232655063s ago: executing program 1 (id=6027): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x180000, 0x8100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 2m43.080149207s ago: executing program 1 (id=6029): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) recvfrom(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}}, 0x40040) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @broadcast, 0x4e21, 0x4, 'sh\x00', 0x1c, 0x2, 0xffffffff}, 0x2c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x9, 0x3, 0x9, 0x6, '\x00', 0x7f}, 0x0, 0x400, 0x9, 0x0, 0x4, 0x6, 'syz1\x00', &(0x7f0000000280)=['/dev/vbi#\x00', '!\\:\x00', ':\x00', '\x00'], 0x11}) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x1c, r8, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000200)) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) 2m43.045793664s ago: executing program 1 (id=6030): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x891a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000500)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000780)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000540)={0x40, 0x90fe6a9a5672a016, 0x5e, "1c3c14f48de409e4e6e6921f5f98b6fcb635fcf293268c1e186f49a7941ddf26149373c60fab0026dc333fcfabf77b2890725db1f91ae46300000000d959e114c9783c62aee4aca6ffe47c7c13cff82c3d9a4a5684bc6d2533f2c8b7bd87"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m42.404018298s ago: executing program 1 (id=6032): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000200)='./file1\x00', 0x5d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000240)) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 2m42.371056792s ago: executing program 1 (id=6033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) io_setup(0x4, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r5, 0x0, 0x0, 0x10001, 0x0, 0x2}]) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffd8b, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r10 = accept4$alg(r6, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r11, &(0x7f0000000f40)={{0x6, @rose}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x3d, r10, {0x323e7193}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$kcm(r12, &(0x7f0000000f00)={&(0x7f0000000180)=@nfc_llcp={0x27, r13, 0x0, 0x5, 0x9, 0x0, "122d180aa4ca74a553188e285ca819a3292bb1b2a9e17f165d474ed70a9b49e577444b8c4a329b4ac85abbbf9738f5487ba75431b283732614f0a19ad83bb8", 0x25}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000200)="4107f5c3297ad0f44f7a244b80b1750985be6de70bb6", 0x16}, {&(0x7f0000000440)="44d1208fd69975e825b5d017b0681aa38a5d1331b374865418b4eccced87ab3c7c410cd325661a08f75359aa18af19aff8c9310973406c57c7b5cac2ac3196a27eadb26579d07a191187b9a569b087120b8c6bce3f0b047e9203129dc0c9cb841f442a9f2d1ef97d6515703eb8bc831c08b61387b3cdd05d329cf68df9a4145233f8d15f1ed1e54ec961ff8f4b57be129254ac6934ba583a66988ab7d82c3e4a78e992fa35bcd2463b8018252e863394f6a1b3211217bb50b27577bf530331a0f61d898e1f39dcfb956a1dbfcfa12a8d966afa4fcd7ca11546ed", 0xda}, {&(0x7f0000000280)="4e0ec35156de9c9187d57cd3f3f9155fad9272409ebfe92812ebfdba29ee6a14016972f091d687b62d62f5394bcd84610ab3bba99bb5d5110ebe98b5ee78f24e4363021604999119d0a02975d65206b79a92de83a590a0105e4c49adc50da0ff02d1a99b57c30cd0827a1e69c6f024d6c88647da328b52a46515d581ebbbd0eed08e2ffb42c87d5573cf", 0x8a}, {&(0x7f0000000540)="d321f1f5c98ecb6d93b672c265b153ea80fa36878a2a949f91e693d7578125d46437d25c027a6b2deb4480cb0bf7195b0e34fb416c897cbfcc8fd902c41436b4b412ece34116e5d11de9f577a3648bbb0c9a7a7479", 0x55}, {&(0x7f00000005c0)="2b017a9e49063bcaa51b36459d6dd660ac65b6554aaf96a55411d96f844727a12985c7dbaf3a59249fe3f8be0f5c97b86a76ca77df153773ed25288dc59c160a13653c41a0145a6243919440b31c1cd110ede5fe7c3affd594b3fba6564005db37ff9d6cc97d30eee3c06df59894b49977c0a609723a02b08fce1dbe1b3211b40b57f3269f543f70ee8770f4524ccee7d77581da07398c51d2a7af13a2cb19fbc262ec194d3a8a51026b38087318", 0xae}, {&(0x7f0000000680)="7bf1dcc8e71f4721c0a89d3145cfd840b81c8dcb5c04ac9498a94f3782f4c6a80427ff2e1e37f096116868ff81281d936414fbe51d7fd20177e483537816e88e0b9ade805617485275dcb868605b10714b07eef5097afcfac457fd9081147d35decf4bfb7ba332589fbf4a97d065a7bfcb379ba4", 0x74}, {&(0x7f0000000f80)="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", 0x10c}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="92063dbe724ed85b3b7cb5eb5f78511769d77821114d949b7af9d2dab8d27986a21e98e528146dd9efafdab3b47037ca2ad066083aa2ef4872b24fbbde65e37f6a49dbabeb6a446aa54634ce", 0x4c}, {&(0x7f0000000a80)="0d6c9f48f3fbf6304ce2282520a563c9b526cc214f07692afbc1c503fe51ec3f974293bd6f1fca30e0d521fed76863e46003334ccb87f5c85b524dee596313a817d60148d5a2eb148f25b98a6b69cba6c4c6fecc1d2fed58db3232b709e60b1685717090b7f92f6dd3d96d5b8ed385f2e02b79db340a3d4d2c1fd851a1550901802690beba1b20ee7b414c4666e437da7409f47ebcc1bf70433bf68313ed92548c1f1ecf16180dd1db08a2d4279ece6e403a28e2f10bc3b1464730bf2394e54797bfcd08ee4e406b96776d8d69f7b66c77b7bd16e91099bd88edc6c8b9b12d54548edbaa", 0xe4}], 0xa, &(0x7f0000000c40)}, 0x0) sendmmsg$sock(r10, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41bbe0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f0000000700)="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", 0x1ca}, {&(0x7f0000000240)="f2b314c96d500b4af7fd46495062d9eb11d188464208592330ac482436286468", 0x20}], 0x3}}], 0x1, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r14, @ANYRESDEC=r8], 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close(r0) 2m27.172079815s ago: executing program 43 (id=6033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) io_setup(0x4, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r5, 0x0, 0x0, 0x10001, 0x0, 0x2}]) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffd8b, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r10 = accept4$alg(r6, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r11, &(0x7f0000000f40)={{0x6, @rose}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x3d, r10, {0x323e7193}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$kcm(r12, &(0x7f0000000f00)={&(0x7f0000000180)=@nfc_llcp={0x27, r13, 0x0, 0x5, 0x9, 0x0, "122d180aa4ca74a553188e285ca819a3292bb1b2a9e17f165d474ed70a9b49e577444b8c4a329b4ac85abbbf9738f5487ba75431b283732614f0a19ad83bb8", 0x25}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000200)="4107f5c3297ad0f44f7a244b80b1750985be6de70bb6", 0x16}, {&(0x7f0000000440)="44d1208fd69975e825b5d017b0681aa38a5d1331b374865418b4eccced87ab3c7c410cd325661a08f75359aa18af19aff8c9310973406c57c7b5cac2ac3196a27eadb26579d07a191187b9a569b087120b8c6bce3f0b047e9203129dc0c9cb841f442a9f2d1ef97d6515703eb8bc831c08b61387b3cdd05d329cf68df9a4145233f8d15f1ed1e54ec961ff8f4b57be129254ac6934ba583a66988ab7d82c3e4a78e992fa35bcd2463b8018252e863394f6a1b3211217bb50b27577bf530331a0f61d898e1f39dcfb956a1dbfcfa12a8d966afa4fcd7ca11546ed", 0xda}, {&(0x7f0000000280)="4e0ec35156de9c9187d57cd3f3f9155fad9272409ebfe92812ebfdba29ee6a14016972f091d687b62d62f5394bcd84610ab3bba99bb5d5110ebe98b5ee78f24e4363021604999119d0a02975d65206b79a92de83a590a0105e4c49adc50da0ff02d1a99b57c30cd0827a1e69c6f024d6c88647da328b52a46515d581ebbbd0eed08e2ffb42c87d5573cf", 0x8a}, {&(0x7f0000000540)="d321f1f5c98ecb6d93b672c265b153ea80fa36878a2a949f91e693d7578125d46437d25c027a6b2deb4480cb0bf7195b0e34fb416c897cbfcc8fd902c41436b4b412ece34116e5d11de9f577a3648bbb0c9a7a7479", 0x55}, {&(0x7f00000005c0)="2b017a9e49063bcaa51b36459d6dd660ac65b6554aaf96a55411d96f844727a12985c7dbaf3a59249fe3f8be0f5c97b86a76ca77df153773ed25288dc59c160a13653c41a0145a6243919440b31c1cd110ede5fe7c3affd594b3fba6564005db37ff9d6cc97d30eee3c06df59894b49977c0a609723a02b08fce1dbe1b3211b40b57f3269f543f70ee8770f4524ccee7d77581da07398c51d2a7af13a2cb19fbc262ec194d3a8a51026b38087318", 0xae}, {&(0x7f0000000680)="7bf1dcc8e71f4721c0a89d3145cfd840b81c8dcb5c04ac9498a94f3782f4c6a80427ff2e1e37f096116868ff81281d936414fbe51d7fd20177e483537816e88e0b9ade805617485275dcb868605b10714b07eef5097afcfac457fd9081147d35decf4bfb7ba332589fbf4a97d065a7bfcb379ba4", 0x74}, {&(0x7f0000000f80)="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", 0x10c}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="92063dbe724ed85b3b7cb5eb5f78511769d77821114d949b7af9d2dab8d27986a21e98e528146dd9efafdab3b47037ca2ad066083aa2ef4872b24fbbde65e37f6a49dbabeb6a446aa54634ce", 0x4c}, {&(0x7f0000000a80)="0d6c9f48f3fbf6304ce2282520a563c9b526cc214f07692afbc1c503fe51ec3f974293bd6f1fca30e0d521fed76863e46003334ccb87f5c85b524dee596313a817d60148d5a2eb148f25b98a6b69cba6c4c6fecc1d2fed58db3232b709e60b1685717090b7f92f6dd3d96d5b8ed385f2e02b79db340a3d4d2c1fd851a1550901802690beba1b20ee7b414c4666e437da7409f47ebcc1bf70433bf68313ed92548c1f1ecf16180dd1db08a2d4279ece6e403a28e2f10bc3b1464730bf2394e54797bfcd08ee4e406b96776d8d69f7b66c77b7bd16e91099bd88edc6c8b9b12d54548edbaa", 0xe4}], 0xa, &(0x7f0000000c40)}, 0x0) sendmmsg$sock(r10, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41bbe0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f0000000700)="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", 0x1ca}, {&(0x7f0000000240)="f2b314c96d500b4af7fd46495062d9eb11d188464208592330ac482436286468", 0x20}], 0x3}}], 0x1, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r14, @ANYRESDEC=r8], 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close(r0) 1m40.113738022s ago: executing program 7 (id=6303): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000040)="240000001a005f3814f9dc07000904018000200000000000000000000800080040000000", 0x24) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r3}) setsockopt(0xffffffffffffffff, 0x3, 0x6, &(0x7f0000000700)="37557bf476e57e3ff487bcca92e2688783c7ffb106450c5928c0b26a8e08fbb2e3deb24243c76131", 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[], 0xbb8}, 0x1, 0x0, 0x0, 0x4042810}, 0x4004040) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r4], &(0x7f0000000340)}) 1m39.933774413s ago: executing program 7 (id=6306): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m39.760040905s ago: executing program 7 (id=6309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, 0x0) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 1m39.738086592s ago: executing program 7 (id=6310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x623, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}]}, 0x3c}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x900, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001500)={'#! ', '', [{0x20, 'westwood'}, {0x20, '\x00'}, {0x20, '\xc2\a\x9b\xf8?\xd3\x88\xbcAz4\x9a\x80@=\x13\x9c\x1b\xee\xf7\\\xa9\x9fS\xc8\x06\xa2\xbd\x82}9\xda\xa5\xe4Jk\xc4\x86\xf1~7\xb2\x1d\xe5\xd8\x89\xc7\xe9IK\xf0\xd2\xa1?&\xb8dk\x16\x9d\xf4%\xbbj\x1e\fP\x8e\x9fJ\xba\x7f\xefD\xbb\x9e\\\xe0\x00I>{\x91?\xf623@\x18\xf7\xb1\xcb\x18\xd6\xa4c\xe5w$\xe4\xd0\xb74\x80\xea9j\xadv\x14z\xa7\x8b\x92cF\xad\xfd\xd7\xa7W\xa8\x14\xfa\x16t.\x8cay%\xd3\xa3\xa2\xa3F\xca\x04\x1f\xf0TU\x01.\x96\x91\t\xe3\x94\x1fn\xb6\xcc\x80\xaa1\xccH\xc0\x93t\x00\xfd~\xba%\xc2\x8b\xcc\xe5\xee\xf6\xc3$9\xf9T\xcaL\xc6*\x05z\r\xfa<\xd1R\xf2\x01\xe9\xe3\x10\x12\xcd\xc9\xfct\xe8'}, {0x20, 'westwood'}], 0xa, "d879fb9a6a4338f597c42498407de0a0fe4b3e91c8755dcb52147b3e03000000000000009cfb55efa39cce29d2a644567f806d9a584289b63992e33d505c8ecbc7d1b9fcf082272ed4b15885f884c2e423b9445c3cc5e4703be85ed5eb4290832a9e075e299ed512b8"}, 0xffffffffffffff97) 1m38.771889628s ago: executing program 7 (id=6314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f10000009800000000000000000000108f"], 0x400040) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x88) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10000a006) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r8, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m38.565235677s ago: executing program 7 (id=6316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x7, {0xfff, 0x1, 0x202}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x0, 0x2087acee, 0x1, {0xd, @raw_data="b818f53c102cec71c6a59ecf50e365e7428795da33ef41a207bcef66666a88c2561b9a74fc131b6263bb758e9c1654bbc53f3ea993a744473810af1cf19387888add12ef5827662f9473bfdf421e09e6bca2c9afea0d5734e6addd239d7e658ba6f9c5e98885f65e6dec1c00614e82f273fb758f5bae20963f5ea21e4220c72388ebc5c9a21953571d1347f4efc435ba8b8ddbcd6a562a9b31be163a6ca20d5df87b5611627a66801c54bee318c28293314f2f347b409c98091953254f5408280c99711118b08e7e"}, 0x1}) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00", 0x28}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) setreuid(0x0, 0xee00) futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x1) fsync(r3) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x2, 0xfc, {}, {0x3, 0x8, 0x8, 0x6a, 0x2, 0x4, "3b7a1286"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x6, {0x1000000000004}, 0x8}, {0xffffffff, 0x39, {0x4}, 0xfff}]}, 0x7}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000a05000000d1000000000003000007000000"], 0x14}}, 0x4800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340001010101010100401800490008ac0f000cac0f000dac0f00"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf8000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x86}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0xc004) 1m23.46495784s ago: executing program 44 (id=6316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x7, {0xfff, 0x1, 0x202}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x0, 0x2087acee, 0x1, {0xd, @raw_data="b818f53c102cec71c6a59ecf50e365e7428795da33ef41a207bcef66666a88c2561b9a74fc131b6263bb758e9c1654bbc53f3ea993a744473810af1cf19387888add12ef5827662f9473bfdf421e09e6bca2c9afea0d5734e6addd239d7e658ba6f9c5e98885f65e6dec1c00614e82f273fb758f5bae20963f5ea21e4220c72388ebc5c9a21953571d1347f4efc435ba8b8ddbcd6a562a9b31be163a6ca20d5df87b5611627a66801c54bee318c28293314f2f347b409c98091953254f5408280c99711118b08e7e"}, 0x1}) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00", 0x28}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) setreuid(0x0, 0xee00) futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x1) fsync(r3) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x2, 0xfc, {}, {0x3, 0x8, 0x8, 0x6a, 0x2, 0x4, "3b7a1286"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x6, {0x1000000000004}, 0x8}, {0xffffffff, 0x39, {0x4}, 0xfff}]}, 0x7}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000a05000000d1000000000003000007000000"], 0x14}}, 0x4800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340001010101010100401800490008ac0f000cac0f000dac0f00"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf8000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x86}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0xc004) 6.488003679s ago: executing program 2 (id=6819): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.330988547s ago: executing program 2 (id=6832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x2400}], 0x1, &(0x7f00000004c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x40000002, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4.195813266s ago: executing program 2 (id=6835): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.07991751s ago: executing program 8 (id=6837): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b000005", 0x101, 0x5, 0x2, 0x800, 0xfffffffb, "f759e100edc710000000d9fc6300", '\x00', "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fef583a8cfb4dc777cb013", "000000ff0000000000000020", "0006488000000000001000"]}) 3.860148287s ago: executing program 5 (id=6840): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.655105091s ago: executing program 8 (id=6841): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x3) ppoll(&(0x7f0000000180)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="0300f198aaae5a98ca00008586dd", 0xe, 0x44000, &(0x7f0000000200)={0x11, 0x10, r2, 0x1, 0xfe, 0x6, @local}, 0x14) 3.473364428s ago: executing program 8 (id=6842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.314516184s ago: executing program 8 (id=6843): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x3000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0xa1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0xf000, 0x6, 0x9d, 0x3, 0x0, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x8080000, 0x6}, {0x2, 0x6}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e022975f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x144}}, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x31, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.152135661s ago: executing program 8 (id=6844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 3.133468864s ago: executing program 8 (id=6845): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0xa}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x1, 0x40, 0x80000001}}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) mlockall(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14567e, 0xa0) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3eb, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x4810) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r9, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0xd, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3756}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000c04) read$FUSE(r8, &(0x7f0000002f80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r8, &(0x7f0000004fc0)={0x90, 0x0, r11, {0x7}}, 0x90) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 2.614507401s ago: executing program 6 (id=6847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000002100)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000005240)="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", 0x100}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0d294861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000002300)="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", 0x14c}, {&(0x7f0000004480)="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", 0xd77}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a40750feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf3", 0xa2}, {&(0x7f0000002480)="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", 0xfe6}, {&(0x7f0000003480)="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", 0xf16}], 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x4da04e1d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000020c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x32) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000080)=0x3, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "1786011d", "1400"}, 0x28) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000002140)={{0x2, 0x4e24, @private=0xa010100}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x20, {0x2, 0x4e23, @multicast2}, 'dvmrp0\x00'}) 2.488109767s ago: executing program 2 (id=6848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5, 0x80}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'lo\x00'}) r2 = socket$kcm(0x2, 0xf, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='btrfs\x00', 0x208083, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2.265230529s ago: executing program 2 (id=6849): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40801) recvmsg$qrtr(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000540)=""/24, 0x18}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x40) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.072264728s ago: executing program 5 (id=6850): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) (fail_nth: 15) 1.765211602s ago: executing program 5 (id=6851): r0 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x7) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)) 1.699753736s ago: executing program 5 (id=6852): prctl$PR_GET_DUMPABLE(0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.568011973s ago: executing program 6 (id=6853): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 1.539756173s ago: executing program 5 (id=6854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x1000}, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xb}]}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) fcntl$addseals(r4, 0x409, 0xc) write(r4, &(0x7f00000002c0)='[', 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xf8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r6, 0xff, 0x7}, 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x7c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.410368905s ago: executing program 6 (id=6855): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x8801, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.25198016s ago: executing program 6 (id=6856): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$cec(&(0x7f0000000940), 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001340), 0x4200, 0x0) read$FUSE(r4, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x5) ftruncate(r6, 0xffff) (async) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000280)="cb5b22496bd190c01b5d4de90100fc2956bbba1645caaab71f4a75293df9560a1662999df842d706e5a2bf8fe85708ae7f5892a0d682d33f9e5da6f7c047ed24d40c2aa944dbfe107c5051e9f5035a3fb77b2d6690677f0970872148f7cd37bb7f61829019fd383977c0c9ea31b97ff486e656dd723fccf11812b319b1ab4c57507fff6ff2f2982026b85d27a50c8381065150097c5136bacb7d6f5c26c928a2b712d6f0940e8dcb5f29350b9582f82b824c1a4408a5a2bd89226bd663db5c827db8cc3474fd35c54c4e8ccefd4d77d54564a956d0afbdb25fd45b0127", 0xdd}, {&(0x7f0000000000)="57bad0cf5772b29467d810199a5676b29a3b6e6698c8a7df4bd61f7dcf9718ab00a14a4f303a", 0x26}, {&(0x7f00000003c0)="5eb7c434db308c6042d9346534f62f824f048b4e607f5736e56d5130cac0fe51f9ceb37d4af733d92ec0d2a524f88a84a901d5aa0206dcf7a60f81186553d7f1560c4bfcdf813fdb1d534eaeee669d56edbecf5bd105262595df7397f729aeceac12e980fd25f2bb9b62c509fdd1c419a01d332c367799d565fc5fb251bf1d99f6c317b41fbc7136f8a0aa91b1feaaf9279a04642d2db1581b078792e6791325d5433a4b870e838aa839eae9d15f273e75", 0xb1}, {&(0x7f0000000140)="d641b48b58baf50b6402be9e2d", 0xd}, {&(0x7f0000000480)="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", 0xe40}], 0x5) close(r3) (async) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000980)) r8 = shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_RMID(r8, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000013c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x60000}, 0x4040000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c000000070601080000000000000000020000000500010006000000c6b3e9b41548c82afaa5bda448e4fcb3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) pwrite64(r2, &(0x7f00000012c0)="557ca7989bcef51c0b9abf61be129e7198a2f69d9b06c2af2a1d41042be1041958ff9fefd01746db129acb5bd0566994b7152024d6a7a41a47b12fa516e73bc19b41b1c706ca362d347477244c752d53eaa35f697afcf57fee", 0x59, 0x4) recvmmsg(r9, 0x0, 0x0, 0x20, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) connect$bt_rfcomm(r10, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xa) (async) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r10, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001d0040000000", 0x24) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.251661247s ago: executing program 5 (id=6857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xf, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000580)={0x0, 0xfffffffffffffffd, 0x0, 0x80, @scatter={0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/251, 0xfb}]}, &(0x7f0000000380), &(0x7f0000000480)=""/229, 0xd9b, 0x4, 0xffffffffffffffff, &(0x7f00000003c0)}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xa3, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x9}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x0, "f4"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x6, 0x4}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x6, "12ae3195"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x9, "1907"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x430, 0x9, 0xd, 0xd, {0x7, 0x25, 0x1, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xec, 0x1, 0xb, 0x65, "a2", "db"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0xff, 0x7f, 'k'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x9, 0x9, {0x7, 0x25, 0x1, 0x81, 0x9, 0xce3}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x0, 0x7, 0xff, 0xff}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x3, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xfff, 0xf00, 0x5, [0xc0ff, 0xffffc0]}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}]}) 1.08597016s ago: executing program 6 (id=6858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0x0, 0x3, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) close_range(r3, r6, 0x0) 916.607757ms ago: executing program 6 (id=6859): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) r0 = fanotify_init(0x29, 0x40000) r1 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r0, 0x2, 0x4000001a, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd090000000000e9ffffffffffdfe8bb4bb00b0c0e91d9f54e91d6e7a604f47c8fecf4b9a6c6c72547dfdfbeba5421f4e4328f3e6cba9454ca99a0387a161467436cf2540cecd35dfc2966c89cbc10a2903aead24ac2a01264d350ce9f7195e219ba44cf1bab237b61e02cd1f1bf309c61c6050f30b49f2b76df0a7326b4bf0cac1981914582f39b3e301f022acee3f0ed9e8ff7", @ANYRES32=r4, @ANYBLOB="0500300000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=6860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x2400}], 0x1, &(0x7f00000004c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 5] usb 3-1: USB disconnect, device number 105 [ 1221.555994][T26756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.570854][ T52] Bluetooth: hci6: command tx timeout [ 1221.618583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c041800: rx timeout, send abort [ 1221.698688][T26756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.858493][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.865739][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.962659][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.969938][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.118801][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c040800: rx timeout, send abort [ 1222.127181][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c041800: abort rx timeout. Force session deactivation [ 1222.326172][T26843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.333616][T26844] pim6reg: entered allmulticast mode [ 1222.360093][T26843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.548158][T26843] nbd5: detected capacity change from 0 to 127 [ 1222.576469][ T52] block nbd5: Receive control failed (result -32) [ 1222.592757][T12354] block nbd5: Dead connection, failed to find a fallback [ 1222.625233][ T5893] IPVS: starting estimator thread 0... [ 1222.627107][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c040800: abort rx timeout. Force session deactivation [ 1222.634819][T12354] block nbd5: shutting down sockets [ 1222.649544][T12354] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.693983][T12354] buffer_io_error: 11 callbacks suppressed [ 1222.694002][T12354] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1222.737833][T12354] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.754209][T26852] IPVS: using max 27 ests per chain, 64800 per kthread [ 1222.757197][T12354] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1222.800226][T12354] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.830566][T12354] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1222.860674][T12354] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.886922][T12354] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1222.910914][T12354] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.934986][T26863] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1222.951535][T12354] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1222.958652][T26863] binder: 26858:26863 ioctl 4018620d 200000004a80 returned -1 [ 1222.979310][T26756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.986582][T12354] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1223.014981][T12354] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1223.040754][T12354] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1223.067616][T12354] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1223.079776][T12354] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1223.112107][T12354] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1223.150893][T12354] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1223.197752][T12354] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1223.205731][T12354] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1223.229918][T12354] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1223.255231][T12354] ldm_validate_partition_table(): Disk read failed. [ 1223.263299][T26870] netlink: 'syz.8.6421': attribute type 1 has an invalid length. [ 1223.275525][T26870] netlink: 'syz.8.6421': attribute type 2 has an invalid length. [ 1223.290582][T12354] Dev nbd5: unable to read RDB block 0 [ 1223.307451][T12354] nbd5: unable to read partition table [ 1223.351395][T12354] ldm_validate_partition_table(): Disk read failed. [ 1223.365123][T12354] Dev nbd5: unable to read RDB block 0 [ 1223.373864][T12354] nbd5: unable to read partition table [ 1223.664834][T26880] loop6: detected capacity change from 0 to 91 [ 1223.739592][T26883] fuse: Bad value for 'fd' [ 1223.883116][T26756] veth0_vlan: entered promiscuous mode [ 1223.915851][T26756] veth1_vlan: entered promiscuous mode [ 1223.984469][T26756] veth0_macvtap: entered promiscuous mode [ 1223.998677][T26756] veth1_macvtap: entered promiscuous mode [ 1224.042820][T26756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.065656][T26756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.080700][T26870] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1224.094128][ T741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.103733][T26870] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1224.117326][T26870] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1224.126299][ T741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.183195][ T741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.236512][ T741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.499321][ T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.539434][ T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.587572][ T5917] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1224.612865][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.643330][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.783723][ T5917] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1224.813369][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.842771][ T5917] usb 3-1: Product: syz [ 1224.862768][ T5917] usb 3-1: Manufacturer: syz [ 1224.884217][ T5917] usb 3-1: SerialNumber: syz [ 1224.930119][ T5917] usb 3-1: config 0 descriptor?? [ 1225.356412][ T5917] airspy 3-1:0.0: Board ID: 00 [ 1225.361439][ T5917] airspy 3-1:0.0: Firmware version: [ 1225.417010][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 1225.488113][ T7852] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1225.647877][ T7852] usb 6-1: Using ep0 maxpacket: 8 [ 1225.660990][ T7852] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 1225.680710][ T7852] usb 6-1: config 0 has no interface number 0 [ 1225.700436][ T7852] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1225.717863][ T7852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.736962][ T7852] usb 6-1: Product: syz [ 1225.747035][ T7852] usb 6-1: Manufacturer: syz [ 1225.757165][ T7852] usb 6-1: SerialNumber: syz [ 1225.768489][T26891] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1225.795357][ T7852] usb 6-1: config 0 descriptor?? [ 1225.815317][ T7852] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1225.835767][ T7852] pctv452e: pctv452e_power_ctrl: 1 [ 1225.835767][ T7852] [ 1225.853431][ T7852] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1225.853431][ T7852] [ 1225.877019][ T7852] dvb-usb: bulk message failed: -22 (5/0) [ 1225.897006][ T7852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1225.938805][ T7852] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1225.977881][ T7852] usb 6-1: media controller created [ 1225.989592][ T7852] dvb-usb: bulk message failed: -22 (8/0) [ 1226.015521][ T7852] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1226.055128][T26910] dvb-usb: bulk message failed: -22 (41/0) [ 1226.064394][ T7852] dvb-usb: MAC address reading failed. [ 1226.080589][T26910] pctv452e: I2C error -22; AA 02 06 22 00 -> aa 02 31 25 06 22 00 [ 1226.150450][ T7852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.389796][ T7852] DVB: Unable to find symbol stb0899_attach() [ 1226.426563][ T7852] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1226.436307][ T5917] airspy 3-1:0.0: Registered as swradio24 [ 1226.452920][ T5917] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1226.591882][ T7852] rc_core: IR keymap rc-tt-1500 not found [ 1226.619564][ T7852] Registered IR keymap rc-empty [ 1226.637224][ T7852] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1226.662618][ T5917] usb 3-1: USB disconnect, device number 106 [ 1226.703114][ T7852] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input134 [ 1226.772071][ T7852] dvb-usb: schedule remote query interval to 100 msecs. [ 1226.797620][ T7852] pctv452e: pctv452e_power_ctrl: 0 [ 1226.797620][ T7852] [ 1226.807265][ T7852] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1226.825540][ T7852] usb 6-1: USB disconnect, device number 52 [ 1226.875361][T26949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.914117][T26948] comedi comedi4: bad chanlist[0]=0x00000a2d chan=2605 range length=2 [ 1226.950871][ T795] hid_parser_main: 51 callbacks suppressed [ 1226.950894][ T795] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 1226.956670][T26949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.014983][ T795] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1227.051221][ T7852] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1227.245090][T26957] input: syz1 as /devices/virtual/input/input135 [ 1227.369757][T26954] fido_id[26954]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1227.489402][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 1227.607588][ T7852] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1227.752363][T26970] fuse: Unknown parameter 'grou00000000000000000000' [ 1227.772920][ T7852] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1227.797811][ T7852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.819337][ T7852] usb 6-1: config 0 descriptor?? [ 1227.850994][ T7852] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1227.889711][T26974] sctp: [Deprecated]: syz.2.6438 (pid 26974) Use of int in maxseg socket option. [ 1227.889711][T26974] Use struct sctp_assoc_value instead [ 1228.038853][ T7852] gspca_spca508: reg_read err -32 [ 1228.058237][ T7852] gspca_spca508: reg_read err -32 [ 1228.187553][ T5917] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1228.328619][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1228.389209][T26960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6435'. [ 1228.589325][ T7852] gspca_spca508: reg_read err -110 [ 1228.595051][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1228.617767][ T5917] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1228.634276][ T7852] gspca_spca508: reg_read err -32 [ 1228.659833][ T7852] gspca_spca508: reg write: error -71 [ 1228.676499][ T7852] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1228.706354][ T7852] usb 6-1: USB disconnect, device number 53 [ 1228.780903][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1228.878739][ T795] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1228.898012][ T5917] usb usb3-port1: attempt power cycle [ 1229.067703][ T795] usb 7-1: Using ep0 maxpacket: 8 [ 1229.105595][ T795] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1229.145311][ T795] usb 7-1: config 179 has no interface number 0 [ 1229.159295][ T795] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1229.187994][ T795] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1229.257641][ T5917] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1229.260387][ T795] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1229.306356][ T795] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1229.331354][ T5917] usb 3-1: device descriptor read/8, error -71 [ 1229.347528][ T795] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1229.416709][ T795] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1229.426579][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.503911][T26997] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1229.543427][T27016] pim6reg: entered allmulticast mode [ 1229.568621][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 1229.587631][ T5917] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1229.660432][ T5917] usb 3-1: device descriptor read/8, error -71 [ 1229.768435][ T5917] usb usb3-port1: unable to enumerate USB device [ 1229.946799][T13411] usb 7-1: USB disconnect, device number 94 [ 1229.946817][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1229.961279][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1230.030830][T27008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6445'. [ 1230.425889][T27032] fuse: Unknown parameter 'grou00000000000000000000' [ 1230.557218][T27036] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 1230.770739][ T95] block nbd3: Possible stuck request ffff888025538000: control (read@0,1024B). Runtime 240 seconds [ 1230.781748][ T95] block nbd3: Possible stuck request ffff888025538200: control (read@1024,1024B). Runtime 240 seconds [ 1230.793273][ T95] block nbd3: Possible stuck request ffff888025538400: control (read@2048,1024B). Runtime 240 seconds [ 1230.804504][ T95] block nbd3: Possible stuck request ffff888025538600: control (read@3072,1024B). Runtime 240 seconds [ 1230.905864][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6452'. [ 1231.108634][T27050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1231.135641][T27050] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1231.160284][T27050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1231.166881][T27050] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1231.198593][T27050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1231.212330][T27050] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1231.227318][T27050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1231.245612][T27050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffa37,4) [ 1231.262235][T27050] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1231.279718][T27050] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1231.293151][T27050] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1231.312470][T27050] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1231.340345][T27050] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1231.357383][T27050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1231.375572][T27050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1231.408316][ T43] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1231.457009][T27060] usb usb8: usbfs: process 27060 (syz.8.6455) did not claim interface 0 before use [ 1231.557601][ T43] usb 3-1: device descriptor read/64, error -71 [ 1231.573021][T27066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6456'. [ 1231.647696][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 1231.809625][ T43] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1231.983628][ T43] usb 3-1: device descriptor read/64, error -71 [ 1232.094554][T27081] fuse: Unknown parameter 'grou00000000000000000000' [ 1232.114593][ T43] usb usb3-port1: attempt power cycle [ 1232.359249][T27089] binder: Binderfs stats mode cannot be changed during a remount [ 1232.420724][T27087] netlink: 'syz.5.6460': attribute type 1 has an invalid length. [ 1232.421560][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6461'. [ 1232.437688][T27087] netlink: 'syz.5.6460': attribute type 3 has an invalid length. [ 1232.437712][T27087] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6460'. [ 1232.457966][ T43] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1232.523453][ T43] usb 3-1: device descriptor read/8, error -71 [ 1232.797914][ T43] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1232.810756][T27106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.870768][ T43] usb 3-1: device descriptor read/8, error -71 [ 1232.887927][T27106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.980676][ T43] usb usb3-port1: unable to enumerate USB device [ 1233.680680][T27122] fuse: Unknown parameter 'group_i00000000000000000000' [ 1233.918151][T27125] loop6: detected capacity change from 0 to 524288000 [ 1234.037904][T27125] loop6: detected capacity change from 524288000 to 0 [ 1234.401900][T27134] tmpfs: Bad value for 'mpol' [ 1234.600080][T27147] kAFS: No cell specified [ 1234.612751][ T95] block nbd4: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 240 seconds [ 1234.623915][ T95] block nbd4: Possible stuck request ffff8880255b0200: control (read@1024,1024B). Runtime 240 seconds [ 1234.635552][ T95] block nbd4: Possible stuck request ffff8880255b0400: control (read@2048,1024B). Runtime 240 seconds [ 1234.648071][ T95] block nbd4: Possible stuck request ffff8880255b0600: control (read@3072,1024B). Runtime 240 seconds [ 1234.663276][T27148] loop6: detected capacity change from 0 to 524288000 [ 1234.711730][T27137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1234.738264][T27147] loop6: detected capacity change from 524288000 to 0 [ 1235.154792][ T24] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1235.195290][T27163] fuse: Unknown parameter 'group_i00000000000000000000' [ 1235.347491][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1235.381929][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1235.427905][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.465159][ T24] usb 7-1: Product: syz [ 1235.482965][ T24] usb 7-1: Manufacturer: syz [ 1235.509102][ T24] usb 7-1: SerialNumber: syz [ 1235.708272][T27181] loop5: detected capacity change from 0 to 1775 [ 1235.744599][T27181] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1235.970515][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1236.178557][T27187] tmpfs: Unknown parameter 'usrquotìVblock_hardlimit' [ 1236.427604][T19658] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1236.622725][T19658] usb 6-1: Using ep0 maxpacket: 8 [ 1236.641408][T19658] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1236.676639][T19658] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.719081][T19658] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1236.767671][T19658] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.817922][T19658] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.861698][T19658] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1236.902231][T19658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.034692][T27209] fuse: Unknown parameter 'group_i00000000000000000000' [ 1237.177189][T19658] usb 6-1: usb_control_msg returned -32 [ 1237.212090][T19658] usbtmc 6-1:16.0: can't read capabilities [ 1237.282656][T27216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.330661][T27216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.507736][ T5917] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1237.552475][T19658] libceph: connect (1)[c::]:6789 error -101 [ 1237.570804][T19658] libceph: mon0 (1)[c::]:6789 connect error [ 1237.677646][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1237.692839][ T5917] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1237.712182][ T5917] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1237.731888][ T5917] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1237.751184][ T5917] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1237.770108][ T5917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1237.789821][ T5917] usb 3-1: config 0 has no interface number 0 [ 1237.804083][ T5917] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1237.840943][ T5917] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1237.858019][T19658] libceph: connect (1)[c::]:6789 error -101 [ 1237.864574][ T5917] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1237.875065][T19658] libceph: mon0 (1)[c::]:6789 connect error [ 1237.888536][ C1] usblp0: nonzero write bulk status received: -71 [ 1237.897635][ T43] usb 7-1: USB disconnect, device number 95 [ 1237.917201][ T5917] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.945740][ T5917] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1237.960956][ T5917] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1237.992009][ T5917] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1238.007247][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.023864][T27154] usblp0: removed [ 1238.026669][ T5917] usb 3-1: Product: syz [ 1238.041957][ T5917] usb 3-1: Manufacturer: syz [ 1238.062484][ T5917] usb 3-1: SerialNumber: syz [ 1238.083610][ T5917] usb 3-1: config 0 descriptor?? [ 1238.107111][ T5917] usb 3-1: selecting invalid altsetting 2 [ 1238.330916][T27222] ceph: No mds server is up or the cluster is laggy [ 1238.418141][T13411] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1238.640159][T13411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.666046][T13411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.719809][T13411] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1238.743607][T13411] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1238.767558][T13411] usb 7-1: Manufacturer: syz [ 1238.791507][T13411] usb 7-1: config 0 descriptor?? [ 1239.148565][ T5917] usb 3-1: USB disconnect, device number 115 [ 1239.710238][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1239.751576][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1239.791202][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1239.858473][ T7852] usb 6-1: USB disconnect, device number 54 [ 1239.881643][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1239.919894][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1239.954137][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1239.995105][T13411] pyra 0003:1E7D:2CF6.006B: unknown main item tag 0x0 [ 1240.059857][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1240.060129][T13411] pyra 0003:1E7D:2CF6.006B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1240.126173][T13411] pyra 0003:1E7D:2CF6.006B: couldn't init struct pyra_device [ 1240.174429][T27253] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6498'. [ 1240.186855][T13411] pyra 0003:1E7D:2CF6.006B: couldn't install mouse [ 1240.221456][T13411] pyra 0003:1E7D:2CF6.006B: probe with driver pyra failed with error -5 [ 1240.328683][T13411] usb 7-1: USB disconnect, device number 96 [ 1240.368115][T27262] fuse: Unknown parameter 'group_id00000000000000000000' [ 1240.445416][T27263] fido_id[27263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1240.646277][T27269] netlink: 750 bytes leftover after parsing attributes in process `syz.8.6501'. [ 1240.700735][ T30] audit: type=1326 audit(6291404191.942:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27268 comm="syz.8.6501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5a78f749 code=0x0 [ 1240.737709][ T30] audit: type=1326 audit(6291404191.952:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27268 comm="syz.8.6501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5a78f749 code=0x0 [ 1240.927634][ T7852] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1241.107622][ T7852] usb 3-1: Using ep0 maxpacket: 8 [ 1241.123176][ T7852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.195490][ T7852] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 1241.227776][ T7852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.235853][ T7852] usb 3-1: Product: syz [ 1241.277583][ T7852] usb 3-1: Manufacturer: syz [ 1241.282310][ T7852] usb 3-1: SerialNumber: syz [ 1241.325747][ T7852] usb 3-1: config 0 descriptor?? [ 1241.417848][ T7852] comedi comedi5: Wrong number of endpoints [ 1241.448649][ T7852] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 1241.611880][T13411] usb 3-1: USB disconnect, device number 116 [ 1241.957601][ T10] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1242.050234][T27301] fuse: Unknown parameter 'group_id00000000000000000000' [ 1242.135000][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1242.156245][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.186843][ T10] usb 7-1: Product: syz [ 1242.194957][ T10] usb 7-1: Manufacturer: syz [ 1242.205602][ T10] usb 7-1: SerialNumber: syz [ 1242.605984][T27313] comedi comedi4: comedi_config --init_data is deprecated [ 1242.628078][ T10] rtl8150 7-1:1.0: couldn't reset the device [ 1242.637617][T27313] netlink: 'syz.2.6513': attribute type 1 has an invalid length. [ 1242.647036][ T10] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1242.661656][T27313] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1242.674468][T27315] FAULT_INJECTION: forcing a failure. [ 1242.674468][T27315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.698126][ T10] usb 7-1: USB disconnect, device number 97 [ 1242.705050][ T7852] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1242.726998][T27315] CPU: 0 UID: 0 PID: 27315 Comm: syz.6.6514 Not tainted syzkaller #0 PREEMPT(full) [ 1242.727027][T27315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1242.727041][T27315] Call Trace: [ 1242.727051][T27315] [ 1242.727061][T27315] dump_stack_lvl+0x189/0x250 [ 1242.727093][T27315] ? __pfx____ratelimit+0x10/0x10 [ 1242.727124][T27315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1242.727151][T27315] ? __pfx__printk+0x10/0x10 [ 1242.727177][T27315] ? __might_fault+0xb0/0x130 [ 1242.727219][T27315] should_fail_ex+0x414/0x560 [ 1242.727251][T27315] _copy_from_user+0x2d/0xb0 [ 1242.727284][T27315] kstrtouint_from_user+0xc4/0x170 [ 1242.727313][T27315] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1242.727367][T27315] proc_fail_nth_write+0x88/0x200 [ 1242.727389][T27315] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1242.727418][T27315] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1242.727441][T27315] vfs_write+0x27e/0xb30 [ 1242.727475][T27315] ? __pfx_vfs_write+0x10/0x10 [ 1242.727498][T27315] ? __fget_files+0x2a/0x420 [ 1242.727528][T27315] ? __fget_files+0x3a0/0x420 [ 1242.727553][T27315] ? __fget_files+0x2a/0x420 [ 1242.727588][T27315] ksys_write+0x145/0x250 [ 1242.727611][T27315] ? __pfx_ksys_write+0x10/0x10 [ 1242.727636][T27315] ? do_syscall_64+0xbe/0xfa0 [ 1242.727660][T27315] do_syscall_64+0xfa/0xfa0 [ 1242.727681][T27315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.727701][T27315] ? clear_bhb_loop+0x60/0xb0 [ 1242.727727][T27315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.727748][T27315] RIP: 0033:0x7fc4f2b8e1ff [ 1242.727774][T27315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1242.727792][T27315] RSP: 002b:00007fc4f3aff030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1242.727815][T27315] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4f2b8e1ff [ 1242.727830][T27315] RDX: 0000000000000001 RSI: 00007fc4f3aff0a0 RDI: 0000000000000006 [ 1242.727844][T27315] RBP: 00007fc4f3aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.727858][T27315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1242.727870][T27315] R13: 00007fc4f2de6038 R14: 00007fc4f2de5fa0 R15: 00007ffc000aa9f8 [ 1242.727906][T27315] [ 1243.277623][ T7852] usb 6-1: Using ep0 maxpacket: 32 [ 1243.297980][ T7852] usb 6-1: no configurations [ 1243.302648][ T7852] usb 6-1: can't read configurations, error -22 [ 1243.412636][T27323] netlink: 'syz.6.6517': attribute type 2 has an invalid length. [ 1243.437943][ T7852] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1243.496763][T27325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6516'. [ 1243.597612][ T7852] usb 6-1: Using ep0 maxpacket: 32 [ 1243.608157][ T7852] usb 6-1: no configurations [ 1243.612817][ T7852] usb 6-1: can't read configurations, error -22 [ 1243.634261][ T7852] usb usb6-port1: attempt power cycle [ 1243.696030][T27333] fuse: Unknown parameter 'group_id00000000000000000000' [ 1243.870136][T27337] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 1243.891571][T27337] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 1243.979842][ T7852] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1244.008390][ T7852] usb 6-1: Using ep0 maxpacket: 32 [ 1244.018169][ T7852] usb 6-1: no configurations [ 1244.029541][ T7852] usb 6-1: can't read configurations, error -22 [ 1244.167775][ T7852] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1244.200449][ T7852] usb 6-1: Using ep0 maxpacket: 32 [ 1244.214611][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.227629][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.230685][ T7852] usb 6-1: no configurations [ 1244.239677][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1244.248799][ T7852] usb 6-1: can't read configurations, error -22 [ 1244.300361][ T7852] usb usb6-port1: unable to enumerate USB device [ 1244.558366][T27349] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1245.097904][ T10] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1245.299367][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.338027][ T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1245.347134][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.368507][ T10] usb 3-1: Product: syz [ 1245.372738][ T10] usb 3-1: Manufacturer: syz [ 1245.377363][ T10] usb 3-1: SerialNumber: syz [ 1245.410371][ T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1245.631243][T27358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.644203][T27367] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6527'. [ 1245.658953][T27358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.685173][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6528'. [ 1245.825358][T27374] fuse: Bad value for 'user_id' [ 1245.837580][T27374] fuse: Bad value for 'user_id' [ 1245.929462][ T10] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1246.056277][T27380] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6532'. [ 1246.088346][T27380] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6532'. [ 1246.238912][T27384] netlink: 'syz.5.6533': attribute type 10 has an invalid length. [ 1246.292713][T27384] team0: Device veth1_macvtap failed to register rx_handler [ 1246.568493][T27395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.599232][T27395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.679011][T27320] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 1246.849763][T27320] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1246.867722][T27320] usb 7-1: config 8 has no interface number 0 [ 1246.884460][T27320] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1246.905971][T27320] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1246.926431][T27320] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1246.936564][T27320] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1246.956772][T27320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.988735][T27391] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1247.226890][T27390] input: syz1 as /devices/virtual/input/input136 [ 1247.341742][T27390] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6535'. [ 1247.528930][T27406] fuse: Bad value for 'user_id' [ 1247.534232][T27406] fuse: Bad value for 'user_id' [ 1247.732260][T27411] comedi: valid board names for 8255 driver are: [ 1247.739906][T27411] 8255 [ 1247.742832][T27411] comedi: valid board names for vmk80xx driver are: [ 1247.754883][T27411] vmk80xx [ 1247.758198][T27411] comedi: valid board names for usbduxsigma driver are: [ 1247.766270][T27411] usbduxsigma [ 1247.770038][ T7852] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1247.779104][T27411] comedi: valid board names for usbduxfast driver are: [ 1247.786146][T27411] usbduxfast [ 1247.790596][T27411] comedi: valid board names for usbdux driver are: [ 1247.798828][T27411] usbdux [ 1247.802095][T27411] comedi: valid board names for ni6501 driver are: [ 1247.808972][T27411] ni6501 [ 1247.812460][T27411] comedi: valid board names for dt9812 driver are: [ 1247.819397][T27411] dt9812 [ 1247.822645][T27411] comedi: valid board names for ni_labpc_cs driver are: [ 1247.831053][T27411] ni_labpc_cs [ 1247.834726][T27411] comedi: valid board names for ni_daq_700 driver are: [ 1247.842719][T27411] ni_daq_700 [ 1247.846269][T27411] comedi: valid board names for labpc_pci driver are: [ 1247.853274][T27411] labpc_pci [ 1247.856763][T27411] comedi: valid board names for adl_pci9118 driver are: [ 1247.868776][T27411] pci9118dg [ 1247.869095][T13411] usb 3-1: USB disconnect, device number 117 [ 1247.872164][T27411] pci9118hg [ 1247.903962][T27411] pci9118hr [ 1247.918793][T27411] comedi: valid board names for 8255_pci driver are: [ 1247.941735][ T7852] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1247.957588][T27411] 8255_pci [ 1247.961151][T27411] comedi: valid board names for s526 driver are: [ 1247.969120][ T7852] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.981012][T27411] s526 [ 1247.983843][T27411] comedi: valid board names for multiq3 driver are: [ 1247.990706][ T7852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1248.002712][T27411] multiq3 [ 1248.006008][T27411] comedi: valid board names for pcmuio driver are: [ 1248.012863][ T7852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1248.025268][T27411] pcmuio48 [ 1248.028778][T27411] pcmuio96 [ 1248.033180][T27411] comedi: valid board names for pcmmio driver are: [ 1248.046346][ T7852] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1248.060805][T27411] pcmmio [ 1248.063817][T27411] comedi: valid board names for pcmda12 driver are: [ 1248.071783][T27411] pcmda12 [ 1248.075051][ T7852] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1248.085976][T27411] comedi: valid board names for pcmad driver are: [ 1248.093928][T27411] pcmad12 [ 1248.099258][ T7852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.114249][T27411] pcmad16 [ 1248.117576][T27411] comedi: valid board names for ni_labpc driver are: [ 1248.131756][ T7852] usb 6-1: config 0 descriptor?? [ 1248.137547][T27411] lab-pc-1200 [ 1248.145510][T27411] lab-pc-1200ai [ 1248.149729][T27411] lab-pc+ [ 1248.153414][T27407] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1248.161519][T27411] comedi: valid board names for atmio16 driver are: [ 1248.169283][T27411] atmio16 [ 1248.190662][T27411] atmio16d [ 1248.195453][T27411] comedi: valid board names for ni_at_ao driver are: [ 1248.204652][T27411] at-ao-6 [ 1248.208778][T27411] at-ao-10 [ 1248.212000][T27411] comedi: valid board names for ni_at_a2150 driver are: [ 1248.220738][T27411] ni_at_a2150 [ 1248.224247][T27411] comedi: valid board names for adq12b driver are: [ 1248.231266][T27411] adq12b [ 1248.234318][T27411] comedi: valid board names for mpc624 driver are: [ 1248.241612][T27411] mpc624 [ 1248.244699][T27411] comedi: valid board names for c6xdigio driver are: [ 1248.252139][T27411] c6xdigio [ 1248.255374][T27411] comedi: valid board names for aio_iiro_16 driver are: [ 1248.262644][T27411] aio_iiro_16 [ 1248.266133][T27411] comedi: valid board names for aio_aio12_8 driver are: [ 1248.275694][T27411] aio_aio12_8 [ 1248.279293][T27411] aio_ai12_8 [ 1248.282809][T27411] aio_ao12_4 [ 1248.286390][T27411] comedi: valid board names for fl512 driver are: [ 1248.293008][T27411] fl512 [ 1248.296007][T27411] comedi: valid board names for dmm32at driver are: [ 1248.303391][T27411] dmm32at [ 1248.306578][T27411] comedi: valid board names for dt282x driver are: [ 1248.313584][T27411] dt2821 [ 1248.316682][T27411] dt2821-f [ 1248.320021][T27411] dt2821-g [ 1248.323276][T27411] dt2823 [ 1248.326501][T27411] dt2824-pgh [ 1248.331380][T27411] dt2824-pgl [ 1248.334812][T27411] dt2825 [ 1248.338093][T27411] dt2827 [ 1248.341163][T27411] dt2828 [ 1248.344232][T27411] dt2829 [ 1248.347318][T27411] dt21-ez [ 1248.352559][T27411] dt23-ez [ 1248.355774][T27411] dt24-ez [ 1248.359040][T27411] dt24-ez-pgl [ 1248.362712][T27411] comedi: valid board names for dt2817 driver are: [ 1248.374968][T27411] dt2817 [ 1248.379829][T27411] comedi: valid board names for dt2815 driver are: [ 1248.386651][T27411] dt2815 [ 1248.390101][T27411] comedi: valid board names for dt2814 driver are: [ 1248.396925][T27411] dt2814 [ 1248.400704][T27411] comedi: valid board names for dt2811 driver are: [ 1248.409519][T27411] dt2811-pgh [ 1248.412968][T27411] dt2811-pgl [ 1248.416392][T27411] comedi: valid board names for dt2801 driver are: [ 1248.423766][T27411] dt2801 [ 1248.426864][T27411] comedi: valid board names for das6402 driver are: [ 1248.434083][T27411] das6402-12 [ 1248.438950][T27411] das6402-16 [ 1248.442398][T27411] comedi: valid board names for das1800 driver are: [ 1248.449979][T27411] das-1701st [ 1248.454104][T27411] das-1701st-da [ 1248.459444][T27411] das-1702st [ 1248.463040][T27411] das-1702st-da [ 1248.466722][T27411] das-1702hr [ 1248.470197][T27411] das-1702hr-da [ 1248.474051][T27411] das-1701ao [ 1248.478328][T27411] das-1702ao [ 1248.481804][T27411] das-1801st [ 1248.485382][T27411] das-1801st-da [ 1248.489172][T27411] das-1802st [ 1248.492608][T27411] das-1802st-da [ 1248.496452][T27411] das-1802hr [ 1248.500530][T27411] das-1802hr-da [ 1248.504219][T27411] das-1801hc [ 1248.508487][T27411] das-1802hc [ 1248.511920][T27411] das-1801ao [ 1248.515336][T27411] das-1802ao [ 1248.521594][T27411] comedi: valid board names for das800 driver are: [ 1248.529771][T27411] das-800 [ 1248.532945][T27411] cio-das800 [ 1248.536551][T27411] das-801 [ 1248.540325][T27411] cio-das801 [ 1248.543801][T27411] das-802 [ 1248.555259][T27411] cio-das802 [ 1248.565628][T27411] cio-das802/16 [ 1248.572016][T27411] comedi: valid board names for isa-das08 driver are: [ 1248.582215][T27411] isa-das08 [ 1248.593079][ T7852] plantronics 0003:047F:FFFF.006C: reserved main item tag 0xd [ 1248.604893][T27411] das08-pgm [ 1248.613735][T27411] das08-pgh [ 1248.621194][T27411] das08-pgl [ 1248.629016][T27411] das08-aoh [ 1248.632519][T27411] das08-aol [ 1248.636133][ T7852] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1248.650515][T27411] das08-aom [ 1248.656702][T27411] das08/jr-ao [ 1248.664113][T27411] das08jr-16-ao [ 1248.667951][T27411] pc104-das08 [ 1248.671517][T27411] das08jr/16 [ 1248.678429][T27411] comedi: valid board names for das16m1 driver are: [ 1248.695002][T27411] das16m1 [ 1248.702743][T27411] comedi: valid board names for dac02 driver are: [ 1248.718577][T27411] dac02 [ 1248.725001][T27411] comedi: valid board names for rti802 driver are: [ 1248.744763][T27411] rti802 [ 1248.753017][T27411] comedi: valid board names for rti800 driver are: [ 1248.769894][T27411] rti800 [ 1248.777879][T27411] rti815 [ 1248.785661][T27411] comedi: valid board names for pcm3724 driver are: [ 1248.801010][ T7852] usb 6-1: USB disconnect, device number 59 [ 1248.816354][T27411] pcm3724 [ 1248.828164][T27411] comedi: valid board names for pcl818 driver are: [ 1248.848416][T27411] pcl818l [ 1248.851543][T27411] pcl818h [ 1248.854618][T27411] pcl818hd [ 1248.865218][T27411] pcl818hg [ 1248.868527][T27411] pcl818 [ 1248.871525][T27411] pcl718 [ 1248.874624][T27411] pcm3718 [ 1248.877812][T27411] comedi: valid board names for pcl816 driver are: [ 1248.885578][T27411] pcl816 [ 1248.889795][T27411] pcl814b [ 1248.892884][T27411] comedi: valid board names for pcl812 driver are: [ 1248.901423][T27411] pcl812 [ 1248.904537][T27411] pcl812pg [ 1248.907802][T27411] acl8112pg [ 1248.911158][T27411] acl8112dg [ 1248.914483][T27411] acl8112hg [ 1248.919648][T27411] a821pgl [ 1248.922855][T27411] a821pglnda [ 1248.926284][T27411] a821pgh [ 1248.930621][T27411] a822pgl [ 1248.933810][T27411] a822pgh [ 1248.936949][T27411] a823pgl [ 1248.940932][T27411] a823pgh [ 1248.944129][T27411] pcl813 [ 1248.947365][T27411] pcl813b [ 1248.950512][T27411] acl8113 [ 1248.953581][T27411] iso813 [ 1248.956676][T27411] acl8216 [ 1248.966811][T27411] a826pg [ 1248.976945][T27411] comedi: valid board names for pcl730 driver are: [ 1248.987082][T27411] pcl730 [ 1248.991074][T27411] iso730 [ 1248.994072][T27411] acl7130 [ 1248.997245][T27411] pcm3730 [ 1249.000768][T27411] pcl725 [ 1249.003759][T27411] p8r8dio [ 1249.006823][T27411] acl7225b [ 1249.010863][T27411] p16r16dio [ 1249.014129][T27411] pcl733 [ 1249.017115][T27411] pcl734 [ 1249.021864][T27411] opmm-1616-xt [ 1249.025421][T27411] pearl-mm-p [ 1249.029175][T27411] ir104-pbf [ 1249.032555][T27411] comedi: valid board names for pcl726 driver are: [ 1249.039692][T27411] pcl726 [ 1249.042843][T27411] pcl727 [ 1249.045879][T27411] pcl728 [ 1249.050304][T27411] acl6126 [ 1249.053554][T27411] acl6128 [ 1249.056665][T27411] comedi: valid board names for pcl724 driver are: [ 1249.063664][T27411] pcl724 [ 1249.067041][T27411] pcl722 [ 1249.070473][T27411] pcl731 [ 1249.073527][T27411] acl7122 [ 1249.076659][T27411] acl7124 [ 1249.080421][T27411] pet48dio [ 1249.083664][T27411] pcmio48 [ 1249.086804][T27411] onyx-mm-dio [ 1249.091475][T27411] comedi: valid board names for pcl711 driver are: [ 1249.100876][T27411] pcl711 [ 1249.103882][T27411] pcl711b [ 1249.106950][T27411] acl8112hg [ 1249.111946][T27411] acl8112dg [ 1249.115238][T27411] comedi: valid board names for amplc_pc263 driver are: [ 1249.124778][T27411] pc263 [ 1249.127910][T27411] comedi: valid board names for amplc_pc236 driver are: [ 1249.135002][T27411] pc36at [ 1249.138352][T27411] comedi: valid board names for amplc_dio200 driver are: [ 1249.145532][T27411] pc212e [ 1249.151721][T27411] pc214e [ 1249.154727][T27411] pc215e [ 1249.158589][T27411] pc218e [ 1249.161665][T27411] pc272e [ 1249.164648][T27411] comedi: valid board names for comedi_parport driver are: [ 1249.176742][T27411] comedi_parport [ 1249.181841][T27411] comedi: valid board names for comedi_test driver are: [ 1249.190400][T27411] comedi_test [ 1249.194624][T27411] comedi: valid board names for comedi_bond driver are: [ 1249.202598][T27411] comedi_bond [ 1249.247715][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1249.255849][ C1] lec:lec_tx_timeout: lec0 [ 1249.417027][T27320] usb 7-1: string descriptor 0 read error: -71 [ 1249.471928][T27320] ir_toy 7-1:8.177: required endpoints not found [ 1249.552173][T27320] usb 7-1: USB disconnect, device number 98 [ 1249.599779][T27427] syzkaller0: entered promiscuous mode [ 1249.626943][T27427] syzkaller0: entered allmulticast mode [ 1249.647011][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.661325][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.681752][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.695666][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.721688][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.734573][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.861820][T27433] fuse: Bad value for 'user_id' [ 1249.866958][T27433] fuse: Bad value for 'user_id' [ 1249.927571][T27320] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1250.087741][T27320] usb 7-1: device descriptor read/64, error -71 [ 1250.217594][T13411] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1250.337877][T27320] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1250.387555][T13411] usb 6-1: Using ep0 maxpacket: 32 [ 1250.406578][T13411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1250.425518][T13411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1250.457593][T13411] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1250.477036][T13411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.487696][T27320] usb 7-1: device descriptor read/64, error -71 [ 1250.507950][ T43] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1250.519429][T13411] usb 6-1: config 0 descriptor?? [ 1250.539498][T13411] hub 6-1:0.0: USB hub found [ 1250.598005][T27320] usb usb7-port1: attempt power cycle [ 1250.671044][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1250.688454][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 1250.708842][ T43] usb 3-1: config 140 has an invalid interface number: 70 but max is 0 [ 1250.726115][ T43] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.741142][T27435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.757066][ T43] usb 3-1: config 140 has no interface number 0 [ 1250.769912][T27435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.777131][ T43] usb 3-1: config 140 interface 70 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1250.791530][T27435] QAT: failed to copy from user cfg_data. [ 1250.798260][ T43] usb 3-1: config 140 interface 70 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.833136][ T43] usb 3-1: config 140 interface 70 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1250.846899][T13411] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 1250.874014][ T43] usb 3-1: config 140 interface 70 has no altsetting 0 [ 1250.893288][ T43] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5 [ 1250.913153][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.927685][ T43] usb 3-1: Product: syz [ 1250.932016][ T43] usb 3-1: Manufacturer: syz [ 1250.937593][ T43] usb 3-1: SerialNumber: syz [ 1250.971102][T27320] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1251.018770][T27320] usb 7-1: device descriptor read/8, error -71 [ 1251.054270][T13411] usbhid 6-1:0.0: can't add hid device: -71 [ 1251.075364][T13411] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1251.128868][T13411] usb 6-1: USB disconnect, device number 60 [ 1251.194887][ T43] peak_usb 3-1:140.70 can0: unable to request usb[type=0 value=1] err=-71 [ 1251.218889][ T43] peak_usb 3-1:140.70: unable to read PCAN-USB Pro firmware info (err -71) [ 1251.267671][T27320] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1251.308328][ T43] peak_usb 3-1:140.70: probe with driver peak_usb failed with error -71 [ 1251.308565][T27320] usb 7-1: device descriptor read/8, error -71 [ 1251.345235][ T43] usb 3-1: USB disconnect, device number 118 [ 1251.449701][T27320] usb usb7-port1: unable to enumerate USB device [ 1251.808291][T27457] vivid-000: disconnect [ 1251.891261][T27457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.909169][T27457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.944064][T27457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.958959][T27459] fuse: Bad value for 'fd' [ 1251.965872][T27457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.006682][T27452] vivid-000: reconnect [ 1252.027693][ T43] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1252.190546][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.202670][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.216713][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 1252.227864][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.242553][ T43] usb 3-1: config 0 descriptor?? [ 1252.496535][T27456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.511880][T27456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.028072][T27320] usb 7-1: new low-speed USB device number 103 using dummy_hcd [ 1253.199474][T27320] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1253.216208][T27320] usb 7-1: config 0 has no interface number 0 [ 1253.236792][T27320] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1253.248741][T27476] binder: 27475:27476 unknown command 0 [ 1253.254365][T27476] binder: 27475:27476 ioctl c0306201 200000000080 returned -22 [ 1253.272589][T27320] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1253.307584][T27320] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1253.336994][T27476] binder: 27475:27476 ioctl 40046205 0 returned -22 [ 1253.347599][T27320] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1253.369132][T27320] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1253.397535][T27320] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1253.412465][T27320] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1253.431691][T27320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.458488][T27320] usb 7-1: config 0 descriptor?? [ 1253.472393][T27468] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1253.482977][T27468] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1253.523534][T27320] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1253.834244][T27490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.868090][T27490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.974538][T27493] fuse: Bad value for 'fd' [ 1254.476780][T27320] usb 7-1: USB disconnect, device number 103 [ 1254.515369][T27320] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1254.675898][T27504] netlink: 228 bytes leftover after parsing attributes in process `syz.8.6573'. [ 1254.716801][T27504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1254.754702][T27505] sctp: [Deprecated]: syz.6.6574 (pid 27505) Use of int in max_burst socket option. [ 1254.754702][T27505] Use struct sctp_assoc_value instead [ 1254.952167][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 1254.973178][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1255.015873][ T43] usb 3-1: USB disconnect, device number 119 [ 1255.447189][T27521] netlink: 'syz.6.6577': attribute type 10 has an invalid length. [ 1255.504403][T27521] veth0_vlan: left promiscuous mode [ 1255.523374][T27521] veth0_vlan: entered promiscuous mode [ 1255.558106][T27521] team0: Device veth0_vlan failed to register rx_handler [ 1255.653202][T21618] lec:lec_start_xmit: lec0:No lecd attached [ 1256.271748][T27525] fuse: Bad value for 'fd' [ 1257.127566][T27320] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1257.212996][T13411] kernel read not supported for file /dsp1 (pid: 13411 comm: kworker/1:3) [ 1257.297549][T27320] usb 6-1: Using ep0 maxpacket: 32 [ 1257.304875][T27320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.319424][T27320] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1257.329612][T27320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.340195][T27320] usb 6-1: Product: syz [ 1257.344606][T27320] usb 6-1: Manufacturer: syz [ 1257.351648][T27320] usb 6-1: SerialNumber: syz [ 1257.361940][T27320] usb 6-1: config 0 descriptor?? [ 1257.373206][T27320] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1257.775894][T27320] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1257.790515][T13411] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1257.794880][T27320] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1257.831211][T27320] usb 6-1: USB disconnect, device number 61 [ 1257.967956][T13411] usb 7-1: Using ep0 maxpacket: 8 [ 1257.981977][T13411] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1257.991650][T13411] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1258.003130][T13411] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1258.013685][T13411] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1258.027612][T13411] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.042052][T13411] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1258.057656][ T43] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1258.067419][T13411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.237614][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1258.250417][ T43] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1258.260019][ T43] usb 3-1: config 1 has no interface number 0 [ 1258.266196][ T43] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1258.280884][ T43] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1258.301431][ T43] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1258.314257][ T43] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1258.326114][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.334329][ T43] usb 3-1: Product: syz [ 1258.339050][ T43] usb 3-1: Manufacturer: syz [ 1258.344063][ T43] usb 3-1: SerialNumber: syz [ 1258.369652][T27555] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1258.377148][T27555] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1258.508194][T27550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.523423][T27550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.845216][T27555] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1258.855972][T27555] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1258.901080][T27561] usbtmc 7-1:16.0: simple usb_control_msg returned 0 [ 1259.104461][T13411] usb 7-1: USB disconnect, device number 104 [ 1259.439361][T27563] fuse: Bad value for 'fd' [ 1259.520689][ T43] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1259.538849][ T43] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1259.578989][ T43] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c2:18:57:7f:84:37 [ 1259.617876][ T43] usb 3-1: USB disconnect, device number 120 [ 1259.646231][ T43] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1259.769271][ T43] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1259.792799][ T43] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1259.813823][ T43] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1259.948028][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1260.084789][T27574] syzkaller0: entered promiscuous mode [ 1260.099794][T27574] syzkaller0: entered allmulticast mode [ 1260.109231][ T24] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1260.149172][ T24] usb 6-1: config 0 has no interface number 0 [ 1260.165874][ T24] usb 6-1: config 0 interface 120 has no altsetting 0 [ 1260.183426][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=d6.f3 [ 1260.199111][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.222280][ T24] usb 6-1: config 0 descriptor?? [ 1260.477610][ T43] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1260.514467][T27567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.548477][T27567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.613374][ T24] usb 6-1: string descriptor 0 read error: -71 [ 1260.631114][ T24] cytherm 6-1:0.120: Cypress thermometer device now attached [ 1260.650542][ T43] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1260.663730][ T24] usb 6-1: USB disconnect, device number 62 [ 1260.675866][ T43] usb 3-1: config 0 has no interface number 0 [ 1260.682464][ T43] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1260.695858][ T24] cytherm 6-1:0.120: Cypress thermometer now disconnected [ 1260.721136][ T43] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1260.735809][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.746540][ T43] usb 3-1: Product: syz [ 1260.751460][ T43] usb 3-1: Manufacturer: syz [ 1260.756169][ T43] usb 3-1: SerialNumber: syz [ 1260.771857][ T43] usb 3-1: config 0 descriptor?? [ 1260.779448][T27576] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1260.803892][ T43] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b2:c6:74:cb:99:76 [ 1260.853308][ T95] block nbd3: Possible stuck request ffff888025538000: control (read@0,1024B). Runtime 270 seconds [ 1260.864259][ T95] block nbd3: Possible stuck request ffff888025538200: control (read@1024,1024B). Runtime 270 seconds [ 1260.876393][ T95] block nbd3: Possible stuck request ffff888025538400: control (read@2048,1024B). Runtime 270 seconds [ 1260.887997][ T95] block nbd3: Possible stuck request ffff888025538600: control (read@3072,1024B). Runtime 270 seconds [ 1261.168466][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1261.176603][ C1] lec:lec_tx_timeout: lec0 [ 1261.413373][T27591] fuse: Bad value for 'fd' [ 1261.567732][T27320] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1261.730423][T27320] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.748107][T27320] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1261.777839][T27320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.800724][T27320] usb 7-1: config 0 descriptor?? [ 1261.824202][T27320] pwc: Askey VC010 type 2 USB webcam detected. [ 1262.078161][T19658] usb 3-1: USB disconnect, device number 121 [ 1262.112031][T19658] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1262.234514][T27320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1262.246455][T27320] pwc: recv_control_msg error -32 req 02 val 2700 [ 1262.289281][T27320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1262.365251][T27612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.402180][T27612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.498009][T27320] pwc: recv_control_msg error -32 req 04 val 1300 [ 1262.507385][T27320] pwc: recv_control_msg error -32 req 04 val 1400 [ 1262.516527][T27588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.531539][T27588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.550972][T27320] pwc: recv_control_msg error -32 req 02 val 2000 [ 1262.562898][T27320] pwc: recv_control_msg error -32 req 02 val 2100 [ 1262.571203][T27320] pwc: recv_control_msg error -32 req 04 val 1500 [ 1262.579464][T27320] pwc: recv_control_msg error -32 req 02 val 2500 [ 1262.594097][T27320] pwc: recv_control_msg error -32 req 02 val 2400 [ 1262.609899][T27320] pwc: recv_control_msg error -32 req 02 val 2600 [ 1262.619390][T27320] pwc: recv_control_msg error -32 req 02 val 2900 [ 1262.630649][T27320] pwc: recv_control_msg error -32 req 02 val 2800 [ 1262.650206][T27320] pwc: recv_control_msg error -32 req 04 val 1100 [ 1262.666129][T27320] pwc: recv_control_msg error -71 req 04 val 1200 [ 1262.683948][T27320] pwc: Registered as video103. [ 1262.706025][T27320] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input138 [ 1262.746214][T27320] usb 7-1: USB disconnect, device number 105 [ 1263.392118][T27646] fuse: Bad value for 'fd' [ 1263.619916][T19658] libceph: connect (1)[c::]:6789 error -101 [ 1263.636366][T19658] libceph: mon0 (1)[c::]:6789 connect error [ 1263.693306][T27659] overlayfs: failed to resolve './file2': -2 [ 1263.774195][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1263.798700][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1263.911016][T19658] libceph: connect (1)[c::]:6789 error -101 [ 1263.939906][T19658] libceph: mon0 (1)[c::]:6789 connect error [ 1263.952263][T27671] binder: 27670:27671 ioctl ae41 1 returned -22 [ 1264.079019][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1264.100673][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1264.409705][T27687] tmpfs: Bad value for 'mpol' [ 1264.478202][T27657] ceph: No mds server is up or the cluster is laggy [ 1264.478382][T27652] ceph: No mds server is up or the cluster is laggy [ 1264.492525][T27320] libceph: connect (1)[c::]:6789 error -101 [ 1264.504915][T27320] libceph: mon0 (1)[c::]:6789 connect error [ 1264.703297][ T95] block nbd4: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 270 seconds [ 1264.714298][ T95] block nbd4: Possible stuck request ffff8880255b0200: control (read@1024,1024B). Runtime 270 seconds [ 1264.726551][ T95] block nbd4: Possible stuck request ffff8880255b0400: control (read@2048,1024B). Runtime 270 seconds [ 1264.738468][ T95] block nbd4: Possible stuck request ffff8880255b0600: control (read@3072,1024B). Runtime 270 seconds [ 1264.780043][T27694] fuse: Invalid rootmode [ 1265.080069][T27705] FAULT_INJECTION: forcing a failure. [ 1265.080069][T27705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.116811][T27705] CPU: 0 UID: 0 PID: 27705 Comm: syz.6.6622 Not tainted syzkaller #0 PREEMPT(full) [ 1265.116841][T27705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.116855][T27705] Call Trace: [ 1265.116865][T27705] [ 1265.116874][T27705] dump_stack_lvl+0x189/0x250 [ 1265.116907][T27705] ? __pfx____ratelimit+0x10/0x10 [ 1265.116939][T27705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1265.116966][T27705] ? __pfx__printk+0x10/0x10 [ 1265.116991][T27705] ? __might_fault+0xb0/0x130 [ 1265.117034][T27705] should_fail_ex+0x414/0x560 [ 1265.117064][T27705] _copy_from_iter+0x1de/0x1790 [ 1265.117095][T27705] ? _copy_from_iter+0x24f/0x1790 [ 1265.117127][T27705] ? __pfx__copy_from_iter+0x10/0x10 [ 1265.117152][T27705] ? sock_alloc_send_pskb+0x86b/0x980 [ 1265.117190][T27705] ? __pfx__copy_from_iter+0x10/0x10 [ 1265.117222][T27705] ? page_copy_sane+0x16a/0x280 [ 1265.117252][T27705] copy_page_from_iter+0xdd/0x170 [ 1265.117286][T27705] skb_copy_datagram_from_iter+0x306/0x720 [ 1265.117331][T27705] tun_get_user+0x1691/0x3e90 [ 1265.117370][T27705] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1265.117402][T27705] ? aa_file_perm+0x44c/0x1540 [ 1265.117424][T27705] ? __pfx_tun_get_user+0x10/0x10 [ 1265.117455][T27705] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 1265.117486][T27705] ? ref_tracker_alloc+0x318/0x460 [ 1265.117511][T27705] ? tun_get+0x157/0x2f0 [ 1265.117527][T27705] ? tun_chr_write_iter+0x60/0x210 [ 1265.117545][T27705] ? ksys_write+0x145/0x250 [ 1265.117564][T27705] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1265.117596][T27705] ? tun_get+0x1c/0x2f0 [ 1265.117620][T27705] ? tun_get+0x1c/0x2f0 [ 1265.117639][T27705] ? tun_get+0x1c/0x2f0 [ 1265.117663][T27705] tun_chr_write_iter+0x113/0x210 [ 1265.117687][T27705] vfs_write+0x5c9/0xb30 [ 1265.117711][T27705] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1265.117741][T27705] ? __pfx_vfs_write+0x10/0x10 [ 1265.117773][T27705] ? __fget_files+0x2a/0x420 [ 1265.117808][T27705] ksys_write+0x145/0x250 [ 1265.117831][T27705] ? __pfx_ksys_write+0x10/0x10 [ 1265.117855][T27705] ? do_syscall_64+0xbe/0xfa0 [ 1265.117879][T27705] do_syscall_64+0xfa/0xfa0 [ 1265.117899][T27705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.117920][T27705] ? clear_bhb_loop+0x60/0xb0 [ 1265.117945][T27705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.117966][T27705] RIP: 0033:0x7fc4f2b8f749 [ 1265.117985][T27705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.118004][T27705] RSP: 002b:00007fc4f3aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.118028][T27705] RAX: ffffffffffffffda RBX: 00007fc4f2de5fa0 RCX: 00007fc4f2b8f749 [ 1265.118044][T27705] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000003 [ 1265.118058][T27705] RBP: 00007fc4f3aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.118072][T27705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.118083][T27705] R13: 00007fc4f2de6038 R14: 00007fc4f2de5fa0 R15: 00007ffc000aa9f8 [ 1265.118118][T27705] [ 1265.461794][T27708] FAULT_INJECTION: forcing a failure. [ 1265.461794][T27708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.489345][T27708] CPU: 1 UID: 0 PID: 27708 Comm: syz.2.6625 Not tainted syzkaller #0 PREEMPT(full) [ 1265.489371][T27708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.489383][T27708] Call Trace: [ 1265.489391][T27708] [ 1265.489399][T27708] dump_stack_lvl+0x189/0x250 [ 1265.489427][T27708] ? __pfx____ratelimit+0x10/0x10 [ 1265.489454][T27708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1265.489476][T27708] ? __pfx__printk+0x10/0x10 [ 1265.489507][T27708] ? __might_fault+0xb0/0x130 [ 1265.489543][T27708] should_fail_ex+0x414/0x560 [ 1265.489568][T27708] _copy_from_user+0x2d/0xb0 [ 1265.489596][T27708] ___sys_sendmsg+0x158/0x2a0 [ 1265.489623][T27708] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.489679][T27708] ? __fget_files+0x2a/0x420 [ 1265.489700][T27708] ? __fget_files+0x3a0/0x420 [ 1265.489730][T27708] __sys_sendmmsg+0x227/0x430 [ 1265.489761][T27708] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1265.489793][T27708] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1265.489826][T27708] ? ksys_write+0x22a/0x250 [ 1265.489846][T27708] ? __pfx_ksys_write+0x10/0x10 [ 1265.489868][T27708] __x64_sys_sendmmsg+0xa0/0xc0 [ 1265.489893][T27708] do_syscall_64+0xfa/0xfa0 [ 1265.489910][T27708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.489928][T27708] ? clear_bhb_loop+0x60/0xb0 [ 1265.489949][T27708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.489965][T27708] RIP: 0033:0x7f5be6d8f749 [ 1265.489982][T27708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.489996][T27708] RSP: 002b:00007f5be7c26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1265.490015][T27708] RAX: ffffffffffffffda RBX: 00007f5be6fe5fa0 RCX: 00007f5be6d8f749 [ 1265.490028][T27708] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000004 [ 1265.490039][T27708] RBP: 00007f5be7c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.490050][T27708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.490060][T27708] R13: 00007f5be6fe6038 R14: 00007f5be6fe5fa0 R15: 00007ffffd1ef948 [ 1265.490089][T27708] [ 1265.515382][T27712] No control pipe specified [ 1265.987371][T27728] fuse: Invalid rootmode [ 1266.098436][ T5917] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1266.247595][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1266.264332][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1266.287096][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1266.307258][T27739] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1266.320997][ T5917] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1266.485405][T27741] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.492284][T27741] binder: 27740:27741 ioctl 4018620d 200000000040 returned -16 [ 1266.501375][T27741] binder: 27740:27741 ioctl c0306201 200000000300 returned -11 [ 1266.526416][T27743] @0Ù: renamed from bond_slave_1 (while UP) [ 1266.527351][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.543774][ T5917] usb 6-1: Product: syz [ 1266.548452][ T5917] usb 6-1: Manufacturer: syz [ 1266.553697][ T5917] usb 6-1: SerialNumber: syz [ 1266.561801][ T5917] usb 6-1: config 0 descriptor?? [ 1266.571116][ T5917] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1266.597618][ T5917] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1266.849944][T27752] fuse: Invalid rootmode [ 1266.947875][ T43] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1267.120363][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.132059][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.144610][ T43] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1267.154736][ T43] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1267.162894][ T43] usb 3-1: Manufacturer: syz [ 1267.178769][ T5917] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1267.188735][ T43] usb 3-1: config 0 descriptor?? [ 1267.208569][ T5917] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1267.224773][ T5917] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1267.233180][ T5917] em28xx 6-1:0.0: No AC97 audio processor [ 1267.705691][T27767] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6644'. [ 1267.945679][T13411] usb 6-1: USB disconnect, device number 63 [ 1267.963784][T27772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.973790][T27772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.991215][T13411] em28xx 6-1:0.0: Disconnecting em28xx [ 1268.011958][ T30] audit: type=1800 audit(2000000022.260:2235): pid=27772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6646" name="bus" dev="tmpfs" ino=921 res=0 errno=0 [ 1268.049317][T13411] em28xx 6-1:0.0: Freeing device [ 1268.094735][ T43] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.006D/input/input139 [ 1268.132215][T27777] fuse: Bad value for 'rootmode' [ 1268.183174][ T43] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.006D/input/input140 [ 1268.212389][ T43] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.006D/input/input141 [ 1268.230768][ T43] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.006D/input/input142 [ 1268.252679][ T43] uclogic 0003:256C:006D.006D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 1268.363069][ T5893] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1268.423619][ T43] usb 3-1: USB disconnect, device number 122 [ 1268.507809][T13411] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1268.524721][T27784] fido_id[27784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1268.540309][ T5893] usb 7-1: device descriptor read/64, error -71 [ 1268.698242][T27786] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6650'. [ 1268.707582][T13411] usb 6-1: Using ep0 maxpacket: 16 [ 1268.729826][T13411] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1268.746471][T13411] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1268.758463][T13411] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1268.772269][T13411] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1268.782580][T13411] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1268.796443][T13411] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1268.806280][T13411] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1268.808177][ T5893] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1268.818065][T13411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.844779][T13411] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1268.968360][ T5893] usb 7-1: device descriptor read/64, error -71 [ 1269.077941][ T5893] usb usb7-port1: attempt power cycle [ 1269.081366][T13411] scsi host1: usb-storage 6-1:1.0 [ 1269.233913][T27806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.247230][T27806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.269407][T27806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6655'. [ 1269.295330][T13411] usb 6-1: USB disconnect, device number 64 [ 1269.436017][ T30] audit: type=1804 audit(2000000023.680:2236): pid=27808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6656" name="/newroot/282/file1" dev="fuse" ino=1 res=1 errno=0 [ 1269.458077][ T5893] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1269.479274][ T5893] usb 7-1: device descriptor read/8, error -71 [ 1269.569527][T27812] fuse: Bad value for 'rootmode' [ 1269.718182][ T5893] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1269.748176][ T5893] usb 7-1: device descriptor read/8, error -71 [ 1269.858004][ T5893] usb usb7-port1: unable to enumerate USB device [ 1269.977602][ T7852] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1270.143574][ T7852] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1270.160472][T27827] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.174375][ T7852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.182728][ T7852] usb 3-1: Product: syz [ 1270.192239][ T7852] usb 3-1: Manufacturer: syz [ 1270.196896][ T7852] usb 3-1: SerialNumber: syz [ 1270.208863][ T7852] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1270.232312][ T5893] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1270.325535][T27827] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.379453][T13411] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1270.445085][T27827] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.557103][T13411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1270.560451][T27827] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.572960][T13411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.591751][T13411] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1270.605831][T13411] usb 6-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 1270.616329][T13411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.631194][T13411] usb 6-1: config 0 descriptor?? [ 1270.735684][T25250] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.762447][T25250] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.791430][ T7413] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.815910][ T7413] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.999619][T27835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.010711][T27835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.049230][T27839] fuse: Bad value for 'rootmode' [ 1271.055298][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.063309][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.071645][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.078878][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.104090][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.117103][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.125449][T13411] elecom 0003:056E:00FC.006E: unknown main item tag 0x0 [ 1271.138798][T13411] elecom 0003:056E:00FC.006E: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.5-1/input0 [ 1271.307374][T27829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6664'. [ 1271.331026][ T5893] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1271.357989][ T5893] ath9k_htc: Failed to initialize the device [ 1271.416304][ T5893] usb 3-1: ath9k_htc: USB layer deinitialized [ 1271.429258][ T7852] usb 6-1: USB disconnect, device number 65 [ 1271.482589][T13411] usb 3-1: USB disconnect, device number 123 [ 1271.767634][ T7852] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1271.917760][ T7852] usb 7-1: Using ep0 maxpacket: 16 [ 1271.925583][ T7852] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.936742][ T7852] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1271.944383][ T7852] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1271.953607][ T7852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.966459][ T7852] usb 7-1: config 0 descriptor?? [ 1272.309833][ T5886] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1272.437926][ T5893] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1272.470986][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 1272.487411][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1272.493984][ T7852] usbhid 7-1:0.0: can't add hid device: -71 [ 1272.501133][ T5886] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1272.501163][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.504385][ T5886] usb 3-1: config 0 descriptor?? [ 1272.516480][ T7852] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1272.536200][ T7852] usb 7-1: USB disconnect, device number 110 [ 1272.599384][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.611996][ T5893] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1272.621718][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.633313][ T5893] usb 6-1: config 0 descriptor?? [ 1272.644003][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 1272.757600][ T5886] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1272.951873][ T5893] pwc: send_video_command error -71 [ 1272.963495][ T5893] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1272.971322][ T5893] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1272.983611][ T5893] usb 6-1: USB disconnect, device number 66 [ 1273.314761][ T5893] usb 3-1: USB disconnect, device number 124 [ 1273.507633][ T7852] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1273.527076][T27873] fuse: Unknown parameter 'use00000000000000000000' [ 1273.657680][ T7852] usb 7-1: Using ep0 maxpacket: 32 [ 1273.667940][ T7852] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1273.676016][ T7852] usb 7-1: config 0 has no interface number 0 [ 1273.685665][ T7852] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 1273.695165][ T7852] usb 7-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 1273.704131][ T7852] usb 7-1: Product: syz [ 1273.708524][ T7852] usb 7-1: Manufacturer: syz [ 1273.713143][ T7852] usb 7-1: SerialNumber: syz [ 1273.720260][ T7852] usb 7-1: config 0 descriptor?? [ 1273.732797][ T7852] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1273.741848][ T7852] usb 7-1: selecting invalid altsetting 1 [ 1273.748569][ T7852] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1273.758231][ T7852] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1273.770114][ T7852] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1273.779269][ T7852] usb 7-1: media controller created [ 1273.794319][ T7852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.847566][T13411] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1273.930972][T27880] dummy0: mtu less than device minimum [ 1273.990271][ T7852] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1274.005769][ T7852] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1274.011075][T13411] usb 6-1: Using ep0 maxpacket: 16 [ 1274.026778][T13411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.039802][T13411] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1274.057302][T13411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.070046][T13411] usb 6-1: config 0 descriptor?? [ 1274.083482][T27883] 9p: Bad value for 'rfdno' [ 1274.690745][T13411] usbhid 6-1:0.0: can't add hid device: -71 [ 1274.703203][T13411] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1274.718546][T13411] usb 6-1: USB disconnect, device number 67 [ 1274.858111][T27883] ceph: No mds server is up or the cluster is laggy [ 1275.075106][T27897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.098016][T27897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.109226][T27870] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1275.119040][ T7852] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1275.176615][ T7852] usb 7-1: USB disconnect, device number 111 [ 1275.194193][T27901] fuse: Unknown parameter 'use00000000000000000000' [ 1275.407936][ T30] audit: type=1326 audit(2000000029.660:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27907 comm="syz.2.6688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5be6d8f749 code=0x0 [ 1275.582440][T27915] program syz.5.6690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1275.705863][T27917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6691'. [ 1275.857063][T27925] fuse: Unknown parameter 'use00000000000000000000' [ 1275.989098][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 1275.997285][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1276.040622][T27932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1276.260492][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1276.269774][ T5919] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1276.277987][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1276.384807][T27941] random: crng reseeded on system resumption [ 1276.407634][ T9] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1276.432250][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1276.443918][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.454973][ T5919] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1276.469341][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.486527][ T5919] usb 6-1: config 0 descriptor?? [ 1276.561341][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1276.570884][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.581984][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1276.594073][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1276.603902][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1276.613005][ T9] usb 7-1: Manufacturer: syz [ 1276.625130][ T9] usb 7-1: config 0 descriptor?? [ 1276.751000][T27927] ceph: No mds server is up or the cluster is laggy [ 1276.795281][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1276.802076][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1276.907577][T27950] fuse: Unknown parameter 'user_i00000000000000000000' [ 1276.909470][ T5919] cherry 0003:046A:0023.006F: item fetching failed at offset 5/7 [ 1276.956291][ T5919] cherry 0003:046A:0023.006F: probe with driver cherry failed with error -22 [ 1277.109552][ T5919] usb 6-1: USB disconnect, device number 68 [ 1277.342367][T27963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.354387][T27963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.367862][T27963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.378615][T27963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.564091][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1277.575980][T27965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1277.703782][T27967] tipc: Started in network mode [ 1277.709308][T27967] tipc: Node identity ac14140f, cluster identity 4711 [ 1277.717356][T27967] tipc: New replicast peer: 255.255.255.255 [ 1277.726432][T27967] tipc: Enabled bearer , priority 10 [ 1277.947111][T27976] fuse: Unknown parameter 'user_i00000000000000000000' [ 1277.977725][ T5919] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1278.128078][ T5919] usb 3-1: device descriptor read/64, error -71 [ 1278.378623][ T5919] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1278.401559][ T5893] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1278.421812][T27992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.431169][T27992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.442373][T27993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.451834][T27993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.527679][ T5919] usb 3-1: device descriptor read/64, error -71 [ 1278.568320][ T5893] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1278.577154][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.584622][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.591238][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.597811][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.604236][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.611892][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.619107][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.625845][ T5893] usb 6-1: config 0 has no interfaces? [ 1278.634265][ T5893] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1278.643862][ T5919] usb usb3-port1: attempt power cycle [ 1278.649394][ T5893] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1278.659088][ T5893] usb 6-1: Product: syz [ 1278.663550][ T5893] usb 6-1: Manufacturer: syz [ 1278.668239][ T5893] usb 6-1: SerialNumber: syz [ 1278.675153][ T5893] usb 6-1: config 0 descriptor?? [ 1278.849519][ T5886] tipc: Node number set to 2886997007 [ 1278.887059][T27983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.896721][T27983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.906557][ T5893] usb 6-1: USB disconnect, device number 69 [ 1278.997640][ T5919] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1279.019226][ T5919] usb 3-1: device descriptor read/8, error -71 [ 1279.124578][T27999] fuse: Unknown parameter 'user_i00000000000000000000' [ 1279.201966][T13411] usb 7-1: USB disconnect, device number 112 [ 1279.257605][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1279.291274][ T5919] usb 3-1: device descriptor read/8, error -71 [ 1279.422988][ T5919] usb usb3-port1: unable to enumerate USB device [ 1279.447626][ T5886] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1279.506299][T28015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.520775][T28015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.531884][T28014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.542204][T28014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.597622][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1279.867650][ T5886] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1280.007785][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1280.109111][T28020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.120888][T28020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.130975][ T5886] usb usb6-port1: attempt power cycle [ 1280.394093][T28022] loop6: detected capacity change from 0 to 91 [ 1280.421238][T28022] buffer_io_error: 139 callbacks suppressed [ 1280.421253][T28022] Buffer I/O error on dev loop6, logical block 11, async page read [ 1280.477756][ T5886] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1280.518281][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1280.566029][T28028] delete_channel: no stack [ 1280.570758][T28028] delete_channel: no stack [ 1280.684122][T28030] fuse: Unknown parameter 'user_id00000000000000000000' [ 1280.763585][ T5886] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1280.799379][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1280.908479][ T5886] usb usb6-port1: unable to enumerate USB device [ 1280.977173][T28042] Bluetooth: MGMT ver 1.23 [ 1281.029313][T28044] overlayfs: missing 'lowerdir' [ 1281.278309][T13411] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1281.457954][T13411] usb 3-1: Using ep0 maxpacket: 32 [ 1281.470748][T13411] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1281.483034][T13411] usb 3-1: config 1 has an invalid interface number: 48 but max is 0 [ 1281.496153][T13411] usb 3-1: config 1 has no interface number 0 [ 1281.506595][T13411] usb 3-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 1281.520175][T13411] usb 3-1: config 1 interface 48 has no altsetting 0 [ 1281.534464][T28052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.535407][T13411] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 1281.552881][T28052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.553659][T13411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.570596][T13411] usb 3-1: Product: syz [ 1281.575034][T13411] usb 3-1: Manufacturer: syz [ 1281.579740][T13411] usb 3-1: SerialNumber: syz [ 1281.589414][T28044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1281.747851][ T5893] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1281.907557][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 1281.914948][ T5893] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1281.919666][T13411] ti_usb_3410_5052 3-1:1.48: TI USB 3410 1 port adapter converter detected [ 1281.924152][ T5893] usb 7-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1281.948216][ T5893] usb 7-1: config 0 has no interface number 0 [ 1281.953732][T13411] usb 3-1: USB disconnect, device number 3 [ 1281.965856][ T5893] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1281.984940][ T5893] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1281.999288][ T5893] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1282.010908][ T5893] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 14182, setting to 64 [ 1282.022374][ T5893] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1282.035658][ T5893] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1282.045819][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.061182][ T5893] usb 7-1: config 0 descriptor?? [ 1282.071002][T28053] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1282.082888][ T5893] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1282.153309][T28057] fuse: Unknown parameter 'user_id00000000000000000000' [ 1282.214698][T25312] udevd[25312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.271280][T28059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.281372][T28059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.306089][T13411] usb 7-1: USB disconnect, device number 113 [ 1282.558208][ T5893] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1282.582980][T28062] openvswitch: netlink: Key type 233 is out of range max 32 [ 1282.709540][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.722010][ T5893] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1282.731444][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.739748][ T5893] usb 6-1: Product: syz [ 1282.744079][ T5893] usb 6-1: Manufacturer: syz [ 1282.749059][ T5893] usb 6-1: SerialNumber: syz [ 1282.757028][ T5893] usb 6-1: config 0 descriptor?? [ 1282.767733][T13411] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1282.941165][T13411] usb 3-1: Using ep0 maxpacket: 8 [ 1282.949259][T13411] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1282.957864][T13411] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.968756][T13411] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1282.970743][ T5893] usb 6-1: USB disconnect, device number 74 [ 1282.978597][T13411] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1282.978629][T13411] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.978678][T13411] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1282.978702][T13411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.264625][T13411] usb 3-1: usb_control_msg returned -32 [ 1283.272130][T13411] usbtmc 3-1:16.0: can't read capabilities [ 1283.387641][ T5893] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1283.540119][ T5893] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1283.548967][ T5893] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1283.562015][ T5893] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1283.571461][ T5893] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1283.583017][ T5893] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1283.596053][ T5893] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1283.606252][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1283.614389][ T5893] usb 7-1: Product: syz [ 1283.618987][ T5893] usb 7-1: Manufacturer: syz [ 1283.630431][ T5893] cdc_wdm 7-1:1.0: skipping garbage [ 1283.635789][ T5893] cdc_wdm 7-1:1.0: skipping garbage [ 1283.643989][ T5893] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 1283.650059][ T5893] cdc_wdm 7-1:1.0: Unknown control protocol [ 1283.767606][ T5919] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1283.833832][ T5893] usb 7-1: USB disconnect, device number 114 [ 1283.845820][T13411] usb 3-1: USB disconnect, device number 4 [ 1283.917577][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 1283.925204][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.936137][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1283.946077][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.957191][ T5919] usb 6-1: config 0 descriptor?? [ 1283.967735][ T5919] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1284.233488][T28071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.243755][T28071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.297677][T13411] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1284.421730][T28079] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1284.430916][T28079] overlayfs: failed to set xattr on upper [ 1284.436689][T28079] overlayfs: ...falling back to redirect_dir=nofollow. [ 1284.443633][T28079] overlayfs: ...falling back to index=off. [ 1284.456835][T28079] overlayfs: ...falling back to uuid=null. [ 1284.463797][T28079] overlayfs: ...falling back to xino=off. [ 1284.717571][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1284.831803][T28082] fuse: Unknown parameter 'user_id00000000000000000000' [ 1284.859130][ T5886] usb 3-1: device descriptor read/64, error -71 [ 1285.107607][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1285.145345][T28088] netlink: 703 bytes leftover after parsing attributes in process `syz.6.6754'. [ 1285.248826][ T5886] usb 3-1: device descriptor read/64, error -71 [ 1285.378143][ T5886] usb usb3-port1: attempt power cycle [ 1285.497304][T28097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.507013][T28097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.757843][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1285.778902][ T5886] usb 3-1: device descriptor read/8, error -71 [ 1285.987668][ T5919] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1286.028720][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1286.068311][ T5886] usb 3-1: device descriptor read/8, error -71 [ 1286.076437][T28105] fuse: Bad value for 'fd' [ 1286.131931][T28107] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6761'. [ 1286.144591][ T5919] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.156894][ T5919] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1286.178187][ T5886] usb usb3-port1: unable to enumerate USB device [ 1286.185393][ T5919] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1286.195122][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1286.204160][ T5919] usb 7-1: SerialNumber: syz [ 1286.236629][T28109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.248274][T28109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.421876][ T5919] usb 7-1: 0:2 : does not exist [ 1286.426973][ T5919] usb 7-1: unit 5 not found! [ 1286.440732][ T5919] usb 7-1: USB disconnect, device number 116 [ 1286.474256][T12354] udevd[12354]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1286.825917][T15457] usb 6-1: USB disconnect, device number 75 [ 1287.184374][T28124] fuse: Bad value for 'fd' [ 1287.197891][T15457] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1287.227610][ T7852] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1287.243546][T28126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.255383][T28126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.357765][T15457] usb 6-1: Using ep0 maxpacket: 16 [ 1287.365907][T15457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.376983][T15457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.387675][T15457] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1287.388124][ T7852] usb 7-1: Using ep0 maxpacket: 32 [ 1287.403087][T15457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.412941][ T7852] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1287.423425][T15457] usb 6-1: config 0 descriptor?? [ 1287.435941][ T7852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.448771][ T7852] usb 7-1: config 0 descriptor?? [ 1287.466757][ T7852] as10x_usb: device has been detected [ 1287.480173][ T7852] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1287.505165][ T7852] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1287.532654][ T7852] as10x_usb: error during firmware upload part1 [ 1287.546436][ T7852] Registered device nBox DVB-T Dongle [ 1287.664260][T24047] usb 7-1: USB disconnect, device number 117 [ 1287.712224][T24047] Unregistered device nBox DVB-T Dongle [ 1287.713838][T24047] as10x_usb: device has been disconnected [ 1287.868197][T28140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.881192][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.889164][T28140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.898224][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.906485][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.914194][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.922830][T28142] netlink: 'syz.2.6776': attribute type 4 has an invalid length. [ 1287.923457][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.932345][T28142] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6776'. [ 1287.942754][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.956808][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.964244][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.971480][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1287.979323][T15457] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 1288.003440][T15457] macally 0003:060B:0001.0070: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.5-1/input0 [ 1288.058520][T15457] usb 6-1: USB disconnect, device number 76 [ 1288.382481][T28148] fuse: Bad value for 'fd' [ 1288.515576][T28152] bridge0: port 3(bond0) entered blocking state [ 1288.522310][T28152] bridge0: port 3(bond0) entered disabled state [ 1288.532272][T28152] bond0: entered allmulticast mode [ 1288.541440][T28152] bond_slave_0: entered allmulticast mode [ 1288.550899][T28152] bond_slave_1: entered allmulticast mode [ 1288.559596][T28152] bond0: entered promiscuous mode [ 1288.564685][T28152] bond_slave_0: entered promiscuous mode [ 1288.570935][T28152] bond_slave_1: entered promiscuous mode [ 1288.578093][T28152] bridge0: port 3(bond0) entered blocking state [ 1288.584561][T28152] bridge0: port 3(bond0) entered forwarding state [ 1288.670715][T28158] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6782'. [ 1288.886849][T28170] fuse: Unknown parameter '0x0000000000000003' [ 1288.937638][ T5886] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 1289.067695][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1289.084200][T28177] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6789'. [ 1289.166816][T13411] hid (null): unknown global tag 0xc [ 1289.183710][T13411] hid-generic 01FF:0003:0005.0071: unknown global tag 0xc [ 1289.193189][T13411] hid-generic 01FF:0003:0005.0071: item 0 0 1 12 parsing failed [ 1289.202014][T13411] hid-generic 01FF:0003:0005.0071: probe with driver hid-generic failed with error -22 [ 1289.247842][T15457] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1289.307651][ T5886] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 1289.404347][T28187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.416539][T28187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.434636][T15457] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1289.445721][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1289.452358][T15457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.460876][T15457] usb 7-1: Product: syz [ 1289.465161][T15457] usb 7-1: Manufacturer: syz [ 1289.470451][T15457] usb 7-1: SerialNumber: syz [ 1289.483408][T15457] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1289.501797][T13411] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1289.578213][ T5886] usb usb6-port1: attempt power cycle [ 1289.937665][ T5886] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 1289.968520][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1290.209976][ T5886] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 1290.249841][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1290.276908][T28189] syzkaller1: entered promiscuous mode [ 1290.284641][T28189] syzkaller1: entered allmulticast mode [ 1290.368944][ T5886] usb usb6-port1: unable to enumerate USB device [ 1290.694662][T28196] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6795'. [ 1290.843368][T28199] fuse: Unknown parameter '0x0000000000000003' [ 1290.916669][T28201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.929049][T13411] usb 7-1: Service connection timeout for: 257 [ 1290.935606][T13411] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1290.952427][ T95] block nbd3: Possible stuck request ffff888025538000: control (read@0,1024B). Runtime 300 seconds [ 1290.965941][ T95] block nbd3: Possible stuck request ffff888025538200: control (read@1024,1024B). Runtime 300 seconds [ 1290.970590][T13411] ath9k_htc: Failed to initialize the device [ 1290.978531][ T95] block nbd3: Possible stuck request ffff888025538400: control (read@2048,1024B). Runtime 300 seconds [ 1290.983933][T28201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.994751][ T95] block nbd3: Possible stuck request ffff888025538600: control (read@3072,1024B). Runtime 300 seconds [ 1291.032906][T13411] usb 7-1: ath9k_htc: USB layer deinitialized [ 1291.049404][T28201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.090333][T28201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.547658][T15457] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1291.697746][T15457] usb 3-1: Using ep0 maxpacket: 16 [ 1291.706520][T15457] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1291.717026][T15457] usb 3-1: config 4 has an invalid interface number: 108 but max is 0 [ 1291.735057][T15457] usb 3-1: config 4 has no interface number 0 [ 1291.754775][T15457] usb 3-1: config 4 interface 108 has no altsetting 0 [ 1291.764663][T15457] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 1291.774733][T15457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.783009][T15457] usb 3-1: Product: syz [ 1291.787776][T15457] usb 3-1: Manufacturer: syz [ 1291.795243][T15457] usb 3-1: SerialNumber: syz [ 1291.818031][T28213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6802'. [ 1291.840211][T28215] binder: 28214:28215 ioctl c018620c 200000000280 returned -1 [ 1291.849015][T28215] comedi comedi0: Minor 3 could not be opened [ 1291.911598][ T43] usb 7-1: USB disconnect, device number 118 [ 1291.974992][T28219] fuse: Unknown parameter '0x0000000000000003' [ 1292.112240][T15457] usb 3-1: active config #4 != 1 ?? [ 1292.133441][T15457] usb 3-1: USB disconnect, device number 9 [ 1292.749512][T28240] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1292.787587][ T43] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1292.907604][T15457] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1292.947804][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1292.956382][ T43] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.967161][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.981408][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1292.989434][T28243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.990778][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.005469][T28243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.026902][ T43] usbtmc 7-1:16.0: bulk endpoints not found [ 1293.058724][T15457] usb 6-1: Using ep0 maxpacket: 8 [ 1293.070703][T15457] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1293.080226][T15457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.088439][T15457] usb 6-1: Product: syz [ 1293.092900][T15457] usb 6-1: Manufacturer: syz [ 1293.098181][T15457] usb 6-1: SerialNumber: syz [ 1293.104999][T15457] usb 6-1: config 0 descriptor?? [ 1293.319418][T15457] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1293.576940][T28245] fuse: Unknown parameter '0x0000000000000003' [ 1293.787904][T28253] Unsupported ieee802154 address type: 0 [ 1293.962574][T28260] loop7: detected capacity change from 0 to 7 [ 1293.975649][ C0] blk_print_req_error: 138 callbacks suppressed [ 1293.975671][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1293.991244][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1293.999639][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.008919][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.019103][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.028462][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.036516][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.045788][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.055534][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.064901][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.073266][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.082637][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.092448][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.101632][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.109871][T28260] ldm_validate_partition_table(): Disk read failed. [ 1294.116686][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.126212][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.135169][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.144490][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.153231][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.162499][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1294.171060][T28260] Dev loop7: unable to read RDB block 0 [ 1294.177659][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1294.186171][T28260] loop7: unable to read partition table [ 1294.192311][T28260] loop7: partition table beyond EOD, truncated [ 1294.200433][T28260] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 1294.293971][T28263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.303797][T28263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.357547][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1294.365493][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.377217][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.388110][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1294.397365][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.408369][ T43] usb 3-1: config 0 descriptor?? [ 1294.423631][ T43] hub 3-1:0.0: USB hub found [ 1294.622920][ T43] hub 3-1:0.0: 1 port detected [ 1294.747345][T15457] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1294.760955][T15457] usb 6-1: USB disconnect, device number 81 [ 1294.784520][ T95] block nbd4: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 300 seconds [ 1294.796004][ T95] block nbd4: Possible stuck request ffff8880255b0200: control (read@1024,1024B). Runtime 300 seconds [ 1294.807438][ T95] block nbd4: Possible stuck request ffff8880255b0400: control (read@2048,1024B). Runtime 300 seconds [ 1294.819421][ T95] block nbd4: Possible stuck request ffff8880255b0600: control (read@3072,1024B). Runtime 300 seconds [ 1295.033194][T28270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.042353][T28270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.245530][ T43] hub 3-1:0.0: activate --> -90 [ 1295.308315][T28273] fuse: Unknown parameter '0x0000000000000003' [ 1295.451502][ T43] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1295.451882][T24047] usb 3-1: USB disconnect, device number 10 [ 1295.577262][ T43] usb 7-1: USB disconnect, device number 119 [ 1296.107899][T28299] fuse: Unknown parameter '0x0000000000000003' [ 1296.183552][T28301] use of bytesused == 0 is deprecated and will be removed in the future, [ 1296.206165][T28301] use the actual size instead. [ 1296.226860][ T7852] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1296.412294][ T7852] usb 7-1: config 2 has an invalid interface number: 117 but max is 0 [ 1296.431529][ T7852] usb 7-1: config 2 has no interface number 0 [ 1296.451746][ T7852] usb 7-1: config 2 interface 117 has no altsetting 0 [ 1296.473392][ T7852] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=1c.1c [ 1296.489388][ T7852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.497896][ T7852] usb 7-1: Product: syz [ 1296.503266][ T7852] usb 7-1: Manufacturer: syz [ 1296.508268][ T7852] usb 7-1: SerialNumber: syz [ 1296.527644][T24047] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1296.677961][T24047] usb 3-1: Using ep0 maxpacket: 16 [ 1296.686331][T24047] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1296.696877][T24047] usb 3-1: config 0 has no interface number 0 [ 1296.696928][T24047] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.696983][T24047] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.697024][T24047] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1296.697049][T24047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.714818][T24047] usb 3-1: config 0 descriptor?? [ 1296.746918][ T7852] garmin_gps 7-1:2.117: Garmin GPS usb/tty converter detected [ 1296.753452][ T7852] garmin_gps ttyUSB1: failed to submit interrupt urb: -22 [ 1296.753498][ T7852] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -22 [ 1296.759723][ T7852] usb 7-1: USB disconnect, device number 120 [ 1296.765857][ T7852] garmin_gps 7-1:2.117: device disconnected [ 1296.858447][ T5886] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1297.019557][ T5886] usb 6-1: config 0 has no interfaces? [ 1297.040597][ T5886] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1297.051052][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.059445][ T5886] usb 6-1: Product: syz [ 1297.063657][ T5886] usb 6-1: Manufacturer: syz [ 1297.070869][ T5886] usb 6-1: SerialNumber: syz [ 1297.079901][ T5886] usb 6-1: config 0 descriptor?? [ 1297.108367][T28324] netlink: 'syz.8.6843': attribute type 1 has an invalid length. [ 1297.116723][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6843'. [ 1297.189805][T28326] fuse: Unknown parameter 'fd0x0000000000000003' [ 1297.329658][T24047] uclogic 0003:28BD:0071.0072: failed retrieving string descriptor #100: -71 [ 1297.350757][T24047] uclogic 0003:28BD:0071.0072: failed retrieving pen parameters: -71 [ 1297.361201][T24047] uclogic 0003:28BD:0071.0072: pen probing failed: -71 [ 1297.374104][T24047] uclogic 0003:28BD:0071.0072: failed probing parameters: -71 [ 1297.388229][T24047] uclogic 0003:28BD:0071.0072: probe with driver uclogic failed with error -71 [ 1297.416854][T24047] usb 3-1: USB disconnect, device number 11 [ 1297.574753][ T7852] usb 6-1: USB disconnect, device number 82 [ 1298.302785][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6850'. [ 1298.313804][T28349] FAULT_INJECTION: forcing a failure. [ 1298.313804][T28349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.330213][T28349] CPU: 1 UID: 0 PID: 28349 Comm: syz.5.6850 Not tainted syzkaller #0 PREEMPT(full) [ 1298.330243][T28349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.330257][T28349] Call Trace: [ 1298.330266][T28349] [ 1298.330276][T28349] dump_stack_lvl+0x189/0x250 [ 1298.330309][T28349] ? __pfx____ratelimit+0x10/0x10 [ 1298.330341][T28349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.330367][T28349] ? __pfx__printk+0x10/0x10 [ 1298.330394][T28349] ? __might_fault+0xb0/0x130 [ 1298.330438][T28349] should_fail_ex+0x414/0x560 [ 1298.330470][T28349] _copy_from_user+0x2d/0xb0 [ 1298.330503][T28349] kstrtouint_from_user+0xc4/0x170 [ 1298.330533][T28349] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1298.330579][T28349] proc_fail_nth_write+0x88/0x200 [ 1298.330602][T28349] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1298.330630][T28349] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1298.330655][T28349] vfs_write+0x27e/0xb30 [ 1298.330686][T28349] ? __pfx_vfs_write+0x10/0x10 [ 1298.330719][T28349] ? __fget_files+0x2a/0x420 [ 1298.330751][T28349] ? __fget_files+0x3a0/0x420 [ 1298.330776][T28349] ? __fget_files+0x2a/0x420 [ 1298.330812][T28349] ksys_write+0x145/0x250 [ 1298.330836][T28349] ? __pfx_ksys_write+0x10/0x10 [ 1298.330861][T28349] ? do_syscall_64+0xbe/0xfa0 [ 1298.330885][T28349] do_syscall_64+0xfa/0xfa0 [ 1298.330906][T28349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.330927][T28349] ? clear_bhb_loop+0x60/0xb0 [ 1298.330953][T28349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.330974][T28349] RIP: 0033:0x7f9da0b8e1ff [ 1298.330995][T28349] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1298.331014][T28349] RSP: 002b:00007f9da19c9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1298.331037][T28349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9da0b8e1ff [ 1298.331052][T28349] RDX: 0000000000000001 RSI: 00007f9da19c90a0 RDI: 0000000000000005 [ 1298.331066][T28349] RBP: 00007f9da19c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.331080][T28349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1298.331093][T28349] R13: 00007f9da0de6038 R14: 00007f9da0de5fa0 R15: 00007ffcf8d8acf8 [ 1298.331129][T28349] [ 1298.567784][T24047] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1298.838508][T24047] usb 3-1: Using ep0 maxpacket: 32 [ 1298.859625][T24047] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1298.868957][T28356] fuse: Unknown parameter 'fd0x0000000000000003' [ 1298.868976][T24047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.869001][T24047] usb 3-1: Product: syz [ 1298.893943][T24047] usb 3-1: Manufacturer: syz [ 1298.902675][T24047] usb 3-1: SerialNumber: syz [ 1298.923427][T24047] usb 3-1: config 0 descriptor?? [ 1298.925302][T28358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6854'. [ 1298.942494][T24047] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1298.967683][T28358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6854'. [ 1299.032249][T28361] Invalid logical block size (34817) [ 1299.427998][ T9] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 1299.592954][ T9] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1299.601694][ T9] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1299.612731][ T9] usb 6-1: config 0 has no interface number 0 [ 1299.619350][ T9] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1299.630652][ T9] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1299.641473][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1299.650983][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.679628][ T9] usb 6-1: config 0 descriptor?? [ 1299.738213][ T5893] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1299.748687][T24047] gspca_stk1135: reg_w 0x5 err -71 [ 1299.755348][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.774187][T24047] gspca_stk1135: Sensor write failed [ 1299.784292][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.792403][T24047] gspca_stk1135: Sensor write failed [ 1299.801738][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.811101][T24047] gspca_stk1135: Sensor read failed [ 1299.816845][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.831310][T24047] gspca_stk1135: Sensor read failed [ 1299.838913][T24047] gspca_stk1135: Detected sensor type unknown (0x0) [ 1299.846109][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.853208][T24047] gspca_stk1135: Sensor read failed [ 1299.860093][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.866805][T24047] gspca_stk1135: Sensor read failed [ 1299.872523][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.881472][T24047] gspca_stk1135: Sensor write failed [ 1299.886867][T24047] gspca_stk1135: serial bus timeout: status=0x00 [ 1299.895138][T24047] gspca_stk1135: Sensor write failed [ 1299.902278][T24047] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1299.923933][ T5893] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1299.938190][T24047] usb 3-1: USB disconnect, device number 12 [ 1299.947716][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.977181][ T5893] usb 7-1: Product: syz [ 1299.987765][ T5893] usb 7-1: Manufacturer: syz [ 1299.992565][ T5893] usb 7-1: SerialNumber: syz [ 1300.008573][ T5893] usb 7-1: config 0 descriptor?? [ 1300.222356][ T5893] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1300.317196][ T9] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input143 [ 1300.368816][ T9] input: failed to attach handler kbd to device input143, error: -5 [ 1300.499496][T28377] binder_alloc: 28376: pid 28376 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1300.529858][ T31] INFO: task syz.1.6033:25497 blocked for more than 143 seconds. [ 1300.542599][ T9] usb 6-1: USB disconnect, device number 83 [ 1300.548070][ T31] Not tainted syzkaller #0 [ 1300.553882][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1300.580414][ T31] task:syz.1.6033 state:D stack:24008 pid:25497 tgid:25496 ppid:20116 task_flags:0x400040 flags:0x00080003 [ 1300.592605][ T31] Call Trace: [ 1300.595947][ T31] [ 1300.599906][ T31] __schedule+0x1836/0x4ed0 [ 1300.604490][ T31] ? __lock_acquire+0xab9/0xd20 [ 1300.610079][ T31] ? __lock_acquire+0xab9/0xd20 [ 1300.614990][ T31] ? __pfx___schedule+0x10/0x10 [ 1300.620769][ T31] ? schedule+0x91/0x360 [ 1300.625121][ T31] schedule+0x165/0x360 [ 1300.627077][T28373] netlink: 'syz.6.6859': attribute type 10 has an invalid length. [ 1300.631648][ T31] io_schedule+0x80/0xd0 [ 1300.642713][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 1300.648453][T28373] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6859'. [ 1300.657534][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1300.663778][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1300.678599][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1300.683156][ T5893] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1300.684316][T28373] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1300.704383][ T31] ? page_has_movable_ops+0x10b/0x400 [ 1300.715710][ T5893] usb 7-1: USB disconnect, device number 121 [ 1300.718079][ T31] migrate_pages_batch+0x14cd/0x35e0 [ 1300.727077][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1300.733663][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1300.740579][T28373] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.766702][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1300.773000][ T31] ? __lock_acquire+0xab9/0xd20 [ 1300.783592][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1300.791110][ T31] migrate_pages+0x2001/0x2910 [ 1300.795951][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1300.801337][T28373] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1300.809506][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1300.814939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1300.826405][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1300.832665][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 1300.839320][ T31] ? rcu_is_watching+0x15/0xb0 [ 1300.844145][ T31] ? isolate_migratepages_block+0x393f/0x4170 [ 1300.857253][ T31] compact_zone+0x23c1/0x4ad0 [ 1300.862349][ T31] ? __pfx_compact_zone+0x10/0x10 [ 1300.867745][ T31] sysctl_compaction_handler+0x3a4/0x7b0 [ 1300.873425][ T31] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1300.880792][ T31] ? trace_kmalloc+0x1f/0xd0 [ 1300.885444][ T31] ? __kvmalloc_node_noprof+0x5f9/0x910 [ 1300.895306][ T31] proc_sys_call_handler+0x4cb/0x700 [ 1300.901972][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1300.908865][ T31] ? __asan_memset+0x22/0x50 [ 1300.913542][ T31] iter_file_splice_write+0x97a/0x10f0 [ 1300.919583][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1300.925538][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 1300.940891][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1300.946842][ T31] direct_splice_actor+0x101/0x160 [ 1300.952286][ T31] splice_direct_to_actor+0x5a8/0xcc0 [ 1300.958873][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 1300.964591][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1300.970820][ T31] do_splice_direct+0x181/0x270 [ 1300.975736][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 1300.981426][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1300.987964][ T31] ? rw_verify_area+0x255/0x4d0 [ 1300.993119][ T31] do_sendfile+0x4da/0x7e0 [ 1300.998255][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 1301.003302][ T31] __se_sys_sendfile64+0xd9/0x190 [ 1301.010736][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 1301.016001][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1301.021987][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1301.026803][ T31] do_syscall_64+0xfa/0xfa0 [ 1301.031776][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.040950][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1301.046267][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.053491][ T31] RIP: 0033:0x7fa6c838f749 [ 1301.058230][ T31] RSP: 002b:00007fa6c914f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1301.066934][ T31] RAX: ffffffffffffffda RBX: 00007fa6c85e5fa0 RCX: 00007fa6c838f749 [ 1301.085576][ T31] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 1301.105368][ T31] RBP: 00007fa6c8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1301.114109][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1301.122909][ T31] R13: 00007fa6c85e6038 R14: 00007fa6c85e5fa0 R15: 00007ffcabc47ea8 [ 1301.131153][ T31] [ 1301.134315][ T31] [ 1301.134315][ T31] Showing all locks held in the system: [ 1301.143122][ T31] 6 locks held by kworker/0:0/9: [ 1301.152169][ T31] 1 lock held by khungtaskd/31: [ 1301.157063][ T31] #0: ffffffff8e33d740 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1301.167392][ T31] 2 locks held by getty/5587: [ 1301.174352][ T31] #0: ffff88803008d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1301.184597][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1301.196648][ T31] 1 lock held by udevd/12289: [ 1301.235690][ T31] #0: ffff888024fed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1301.257486][ T31] 1 lock held by udevd/12352: [ 1301.262228][ T31] #0: ffff888024feb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1301.278323][ T31] 1 lock held by syz.1.6033/25497: [ 1301.283687][ T31] #0: ffff8880636ae420 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 1301.295578][ T31] 1 lock held by syz-executor/25627: [ 1301.301877][ T31] [ 1301.304319][ T31] ============================================= [ 1301.304319][ T31] [ 1301.317938][ T31] NMI backtrace for cpu 0 [ 1301.317958][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1301.317982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1301.317996][ T31] Call Trace: [ 1301.318005][ T31] [ 1301.318014][ T31] dump_stack_lvl+0x189/0x250 [ 1301.318049][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1301.318076][ T31] ? __pfx__printk+0x10/0x10 [ 1301.318114][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1301.318145][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1301.318174][ T31] ? __pfx__printk+0x10/0x10 [ 1301.318204][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1301.318229][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1301.318259][ T31] sys_info+0x135/0x170 [ 1301.318281][ T31] watchdog+0xfb5/0x1000 [ 1301.318317][ T31] ? watchdog+0x20a/0x1000 [ 1301.318355][ T31] kthread+0x711/0x8a0 [ 1301.318387][ T31] ? __pfx_watchdog+0x10/0x10 [ 1301.318417][ T31] ? __pfx_kthread+0x10/0x10 [ 1301.318448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.318478][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.318508][ T31] ? __pfx_kthread+0x10/0x10 [ 1301.318538][ T31] ret_from_fork+0x599/0xb30 [ 1301.318564][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.318598][ T31] ? __switch_to_asm+0x39/0x70 [ 1301.318625][ T31] ? __switch_to_asm+0x33/0x70 [ 1301.318659][ T31] ? __pfx_kthread+0x10/0x10 [ 1301.318688][ T31] ret_from_fork_asm+0x1a/0x30 [ 1301.318735][ T31] [ 1301.318744][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1301.477917][ C1] NMI backtrace for cpu 1 [ 1301.477936][ C1] CPU: 1 UID: 0 PID: 741 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1301.477957][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1301.477970][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1301.478000][ C1] RIP: 0010:___slab_alloc+0xe79/0x1990 [ 1301.478024][ C1] Code: 24 0c 89 4c 24 3c 89 44 24 2c 44 89 6c 24 58 84 c9 74 19 8b 44 24 38 89 44 24 5c 41 89 ec 83 fd ff 75 1c 65 8b 2d 07 4c 9e 10 13 a8 01 0f 85 23 04 00 00 8b 44 24 38 89 44 24 5c 41 89 ec 83 [ 1301.478040][ C1] RSP: 0018:ffffc900033f77a0 EFLAGS: 00000246 [ 1301.478055][ C1] RAX: 0000000000001000 RBX: ffff88813fe27140 RCX: 0000000000000001 [ 1301.478067][ C1] RDX: ffffc900033f77f8 RSI: ffffffff8da8c2f6 RDI: ffffffff8be14f60 [ 1301.478081][ C1] RBP: 0000000000000000 R08: ffffffff8fbf8477 R09: 1ffffffff1f7f08e [ 1301.478094][ C1] R10: dffffc0000000000 R11: fffffbfff1f7f08f R12: 00000000ffffffff [ 1301.478107][ C1] R13: 0000000000082820 R14: ffff8880b873ec30 R15: 0000000000000000 [ 1301.478119][ C1] FS: 0000000000000000(0000) GS:ffff888125b72000(0000) knlGS:0000000000000000 [ 1301.478134][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.478147][ C1] CR2: 00007f5be7c25f98 CR3: 0000000028584000 CR4: 00000000003526f0 [ 1301.478163][ C1] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 1301.478174][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1301.478185][ C1] Call Trace: [ 1301.478192][ C1] [ 1301.478204][ C1] ? __alloc_skb+0x142/0x2d0 [ 1301.478227][ C1] ? __alloc_skb+0x142/0x2d0 [ 1301.478247][ C1] __slab_alloc+0x65/0x100 [ 1301.478270][ C1] __kmalloc_node_track_caller_noprof+0x5d0/0x810 [ 1301.478288][ C1] ? __alloc_skb+0x142/0x2d0 [ 1301.478310][ C1] ? __alloc_skb+0x142/0x2d0 [ 1301.478329][ C1] kmalloc_reserve+0x136/0x290 [ 1301.478352][ C1] __alloc_skb+0x142/0x2d0 [ 1301.478374][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 1301.478411][ C1] ? process_one_work+0x868/0x15e0 [ 1301.478430][ C1] process_one_work+0x93a/0x15e0 [ 1301.478447][ C1] ? __lock_acquire+0xab9/0xd20 [ 1301.478478][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1301.478501][ C1] ? assign_work+0x3a1/0x410 [ 1301.478522][ C1] worker_thread+0x9b0/0xee0 [ 1301.478555][ C1] kthread+0x711/0x8a0 [ 1301.478580][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1301.478599][ C1] ? __pfx_kthread+0x10/0x10 [ 1301.478624][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.478651][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.478676][ C1] ? __pfx_kthread+0x10/0x10 [ 1301.478700][ C1] ret_from_fork+0x599/0xb30 [ 1301.478720][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.478744][ C1] ? __switch_to_asm+0x39/0x70 [ 1301.478768][ C1] ? __switch_to_asm+0x33/0x70 [ 1301.478790][ C1] ? __pfx_kthread+0x10/0x10 [ 1301.478815][ C1] ret_from_fork_asm+0x1a/0x30 [ 1301.478849][ C1] [ 1304.219271][ T5199] udevd[5199]: worker [12352] /devices/virtual/block/nbd3 timeout; kill it [ 1304.228658][ T5199] udevd[5199]: seq 34772 '/devices/virtual/block/nbd3' killed [ 1304.236473][ T5199] udevd[5199]: worker [12289] /devices/virtual/block/nbd4 timeout; kill it [ 1304.245451][ T5199] udevd[5199]: seq 34853 '/devices/virtual/block/nbd4' killed [ 1305.653929][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.661148][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.671187][ T1299] lec:lec_start_xmit: lec0:No lecd attached