last executing test programs: 5m4.841739077s ago: executing program 0 (id=271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r4, r4}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 5m4.705266451s ago: executing program 0 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0xffff1000, 0x1000, &(0x7f000000f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x7, 0x3, 0x8, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x2, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x5, 0x9, 0xb, 0x4, 0x80, 0x800000000006, 0x794, 0xa, 0x43, 0xc976, 0x6], 0x2, 0x220100}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="660f388097ab1bf20f2da6e72f66b9800000c00f326635000100000f30d9e80f01cfbaf80c66b8187ad78666efbafc0c66b80a00000066ef36260f79076766c744240095ad48c36766c7442402007000006766c744240600000000670f011424626572266f", 0x65}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r11, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r13, 0x107, 0xd, &(0x7f0000000200)=@req={0x3, 0x6da, 0x4, 0xaeb}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 5m4.011531047s ago: executing program 0 (id=279): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x10012, r1, 0x0) futimesat(r1, 0x0, &(0x7f0000000200)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m3.715787688s ago: executing program 0 (id=280): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) prctl$PR_SET_NO_NEW_PRIVS(0x59616d61, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, '\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0x40085112, &(0x7f00000002c0)=0x1ff) r6 = getuid() mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1004028, &(0x7f0000000300)={[{@metacopy_off}, {@xino_on}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r6}}, {@fsname={'fsname', 0x3d, '{'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x85\xaf\xe2\xc7J\x9f\t\xbdKp\xbe\x9a\xdf\xc0\x19%\x19\xf9b\xc5\xc9\xccN\xa5,\xb7{[NW \x10\x18Z\xf7\\r\xc8\xb6\x1d\xc0\x9a\xb3q\x92\xc1\x9c\x10H\x88\x8a:\xa2\x93\xfa\xc2|1\x14\xae]\x9a\t72\xa9\xfc\xa6\x03\xd8\x06.\x9c\xbf&M\xbc\x12\xb3,\xaex\xcdSJ\xc6\xb5Y\xadTw\x17\x8e?`\xb4\x92>\x87\xd7\xc0\xa8j7Y$\xbdX\x00\x00\x00\x00\x00\x00\xea\x9f\x8a\x85\xad\xfd\x93W\xed\xea\x06-\a\xb6\x04\x8d\xe8\xd1O\xbc\xa4T~\xa9HBG_\xb15\x80\xf1d\xcc:\xeb\rS'}}, {@euid_gt}]}) 5m3.42979199s ago: executing program 0 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000001e9811040200193815b000001010902120001000000000904"], 0x0) mount$afs(&(0x7f00000003c0), &(0x7f0000002600)='./file0/../file0/file0\x00', &(0x7f0000002640), 0x1010003, &(0x7f0000002680)={[{@flock_strict}, {@flock_local}, {@flock_write}, {@flock_local}, {@flock_openafs}, {@dyn}, {@flock_strict}, {@flock_openafs}, {@flock_openafs}], [{@dont_measure}, {@appraise}, {@flag='lazytime'}, {@subj_user}]}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f00000001c0)='./file0/../file0/file0\x00') r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/226, 0xe2}], 0x3, 0x2, 0x80000400, 0x1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x400, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x40044}}], 0x1, 0x5) read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002480)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) mount$overlay(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000280), 0x204000, &(0x7f0000002580)={[{@metacopy_off}], [{@appraise}, {@uid_gt={'uid>', r6}}, {@euid_lt={'euid<', r8}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r9}}, {@dont_hash}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x82, 0x7, {0x4b2, 0x7, 0x7, 0xb77f}}) 5m1.831703554s ago: executing program 0 (id=290): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r0 = fsopen(&(0x7f0000000440)='gfs2meta\x00', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="4003000000acd500"], 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000007c0)) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000008009000", @ANYRES32=r5, @ANYBLOB="0b000280976b640868603000"], 0x24}], 0x1}, 0xcc000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x40, 0x3, 0xf3, {0xf3, 0x21, "2de5edcc230ddfcff1d218b6dc9b965e5b130bc8e2f77144be8280577aca5c14fdf24293d800fc9f78a28457f61acd5bbbddf715d830a4534362dc3d75454ff400f5e674e93e96c0f360077eea2537280b469d80716f5d058dfe11be7e895737df3114274b0dd0a9989e8e59dfe09599f93176eca0abf336a0c65b12d436fbba189967bb840c37c9619003539173f2dafb74b565de81a55c512b34d8c0d07a5b03c82ee317b9037f8889bfbdfd51a62f761c2d25e6a35b94588e39042cf67abe95f324694d437b4e930e161843c024697ef28984121123fbcf3bf2646b123cad1164f2793bb4efdbdec7ab49db080da2be"}}, 0x0}, &(0x7f0000000840)={0x44, &(0x7f0000000980)=ANY=[@ANYBLOB="7ff47d143a50d5210780607b358c2f532401c3005eb882be5d4841e47bb86b69416f5687e6ca4310f2bf1232f6165702e04848f476303ef7c1eb7218f45f448b2f342b4493e6b705d2deaf186ad6f377b96a427a527626ff9ab5d16f1b7cfb0dc8b90ca22eac4cd41ac8150c7fd03a8521b8541ce6030000000000000088e0cc77e77d2bf2f49006acfab59681b13313108399c421"], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0xc}, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)={0x2082c1, 0x2, 0x3b}, 0x18) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$SG_IO(r8, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffb, 0x26, 0x0, @scatter={0x1, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/123, 0x7b}]}, &(0x7f00000005c0)="a5c97918d6cd59189a42c4cd34ba9d2a2271cc467bc1038bc6e530d113d1a300b87d20de5eb7", &(0x7f0000000680)=""/183, 0x1, 0x11, 0x3, &(0x7f0000000600)}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2be", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000008009000", @ANYRES32=r5, @ANYBLOB="0b000280976b640868603000"], 0x24}], 0x1}, 0xcc000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x40, 0x3, 0xf3, {0xf3, 0x21, "2de5edcc230ddfcff1d218b6dc9b965e5b130bc8e2f77144be8280577aca5c14fdf24293d800fc9f78a28457f61acd5bbbddf715d830a4534362dc3d75454ff400f5e674e93e96c0f360077eea2537280b469d80716f5d058dfe11be7e895737df3114274b0dd0a9989e8e59dfe09599f93176eca0abf336a0c65b12d436fbba189967bb840c37c9619003539173f2dafb74b565de81a55c512b34d8c0d07a5b03c82ee317b9037f8889bfbdfd51a62f761c2d25e6a35b94588e39042cf67abe95f324694d437b4e930e161843c024697ef28984121123fbcf3bf2646b123cad1164f2793bb4efdbdec7ab49db080da2be"}}, 0x0}, &(0x7f0000000840)={0x44, &(0x7f0000000980)=ANY=[@ANYBLOB="7ff47d143a50d5210780607b358c2f532401c3005eb882be5d4841e47bb86b69416f5687e6ca4310f2bf1232f6165702e04848f476303ef7c1eb7218f45f448b2f342b4493e6b705d2deaf186ad6f377b96a427a527626ff9ab5d16f1b7cfb0dc8b90ca22eac4cd41ac8150c7fd03a8521b8541ce6030000000000000088e0cc77e77d2bf2f49006acfab59681b13313108399c421"], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0xc}, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)={0x2082c1, 0x2, 0x3b}, 0x18) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$SG_IO(r8, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffb, 0x26, 0x0, @scatter={0x1, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/123, 0x7b}]}, &(0x7f00000005c0)="a5c97918d6cd59189a42c4cd34ba9d2a2271cc467bc1038bc6e530d113d1a300b87d20de5eb7", &(0x7f0000000680)=""/183, 0x1, 0x11, 0x3, &(0x7f0000000600)}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2be", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffe01, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x120}, 0x1c) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r3], 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='fusectl\x00', 0x200000, 0x0) 4m24.167884266s ago: executing program 1 (id=470): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x9, 0x0, 0xe, 0x2}, {0x6000, 0xdddd0000, 0x10, 0x0, 0x40, 0x9, 0x1, 0x1, 0x5, 0x0, 0x3}, {0x3000, 0x1000, 0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0x9, 0xe7, 0x1, 0x2, 0x1, 0x4, 0x8, 0x8, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0x2, 0xdddd1000, 0x3, 0x1, 0xb1, 0x8, 0x4, 0x7e, 0x80, 0xa, 0x1, 0x2}, {0xdddd0000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x4}, {0x100000, 0x8000000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0xf000, [0x4, 0x6, 0x15e, 0x3]}) 4m9.108767807s ago: executing program 33 (id=470): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x9, 0x0, 0xe, 0x2}, {0x6000, 0xdddd0000, 0x10, 0x0, 0x40, 0x9, 0x1, 0x1, 0x5, 0x0, 0x3}, {0x3000, 0x1000, 0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0x9, 0xe7, 0x1, 0x2, 0x1, 0x4, 0x8, 0x8, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0x2, 0xdddd1000, 0x3, 0x1, 0xb1, 0x8, 0x4, 0x7e, 0x80, 0xa, 0x1, 0x2}, {0xdddd0000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x4}, {0x100000, 0x8000000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0xf000, [0x4, 0x6, 0x15e, 0x3]}) 2m28.076790097s ago: executing program 4 (id=1233): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4088840) (fail_nth: 1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x4}, 0x20) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(0x0, &(0x7f0000001440)='./file0\x00', 0x0, 0x208083, 0x0) 2m27.782598244s ago: executing program 4 (id=1235): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000580)={0xb53, 0x4, [0x4]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m27.479835064s ago: executing program 4 (id=1237): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x30, 0xffffffffffffffff, 0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x93774000) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$SIOCRSSCAUSE(r2, 0x89e1, 0x0) 2m26.439147873s ago: executing program 4 (id=1243): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4088840) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x4}, 0x20) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(0x0, &(0x7f0000001440)='./file0\x00', 0x0, 0x208083, 0x0) 2m26.389322336s ago: executing program 4 (id=1244): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4088840) (fail_nth: 2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x4}, 0x20) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(0x0, &(0x7f0000001440)='./file0\x00', 0x0, 0x208083, 0x0) 2m25.884008905s ago: executing program 4 (id=1245): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000040)=0x6) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r2}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$netlink(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048001}, 0x0) recvmsg$can_j1939(r5, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m10.77968174s ago: executing program 34 (id=1245): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000040)=0x6) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r2}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$netlink(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048001}, 0x0) recvmsg$can_j1939(r5, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m44.358549639s ago: executing program 6 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776604006f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8f1bc000) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0x0, 0x0, 0x80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m43.984841618s ago: executing program 2 (id=1470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'wg0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x80000000, 0x400, 0x0, 0x80008000, 0x401, 0x2, 0x8, 0x5}}) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x6c}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r10], &(0x7f0000000200), 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251000000005000f000400000008000100", @ANYRES32=0x0, @ANYBLOB="050010"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYBLOB="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"/316], 0x184}}, 0x20000000) 1m43.716605443s ago: executing program 2 (id=1473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000040)="4edd36d849570f7a97816f7cccff3c6db2bc660394bb1f032550e05de5d360e2c9707bf31509da6ee2a0dd1b213d9b45b97fd3293d95702c91bcb4b0ca0f6e55541839ee5293c01e3b432586d56e6f5b0d4c7df9a5c98f5cd147481b140536b79f724a50b15e1fd6fb125f704d3db245acc920137db095acfb92c5aa7cd1b5b5704f6d1f2dcfca9dd0a922ae0fb4249e69d2af16a63cae7a04a2beb0462ae1911d6fddc676668ae8307909824e7d34d52770b3058dded592db4a58c3d4dc", 0xbe}], 0x2}, 0x4040004) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="4013f9ff2550b400"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1m43.592049913s ago: executing program 6 (id=1474): creat(&(0x7f0000000080)='./file0\x00', 0xac) r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000100)) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1m43.324841494s ago: executing program 6 (id=1479): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {0x4000}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1m43.027998217s ago: executing program 6 (id=1481): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = msgget$private(0x0, 0x790) msgsnd(r3, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x800) msgrcv(r3, &(0x7f0000000000)={0x0, ""/95}, 0x67, 0x0, 0x1000) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m42.015655414s ago: executing program 6 (id=1484): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2}, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffb7}, 0x801) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async) r2 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3, 0x2}, 0x18, 0x1) landlock_restrict_self(r3, 0x0) (async) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'pimreg\x00'}, 0x18) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x2, r5, 0x2}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x0, "75dd06000000000000002c2a028c07598a134fc7080100fb00000417f305f300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000000)={"a1fb819c4ba7a03f71ba3fb5829728bc9f1814b6e001e3c8b14619059bf2edbd", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}) (async) r8 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000280)={0x0, &(0x7f0000000200)=[@wrmsr={0x1e, 0x20, {0x771, 0x8000000000000004}}, @rdmsr={0x32, 0x18, {0x777}}, @wr_crn={0x46, 0x20, {0x8, 0x1}}, @rdmsr={0x32, 0x18, {0xdc1}}], 0x70}) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f00000002c0)={0x4, 0x0, [{0x289, 0x0, 0x1400000}, {0x401, 0x0, 0x8}, {0xbba, 0x0, 0x2}, {0x648, 0x0, 0x10001}]}) (async) ptrace(0x4207, r2) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120110037ee8048968dd930102030109021200016abfd0060904080100ff036b93000000"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) (async) sendfile(r10, r10, 0x0, 0x7ffff000) 1m41.856354659s ago: executing program 6 (id=1486): r0 = add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$negate(0xd, r0, 0x1000, 0x0) lsetxattr$security_capability(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540), &(0x7f0000000580)=@v1={0x1000000, [{0x2, 0x6}]}, 0xc, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x40045109, &(0x7f0000002240)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0xfffffffe}, 0x1c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x3, 0x8a, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000400)) r5 = dup(r4) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000440)) r6 = semget$private(0x0, 0x7, 0x254) syz_open_dev$usbfs(&(0x7f0000000000), 0x330, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000300)={0x2, 0x4000000000000000, 0x3, 0x100, 0x4b5, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3fe, 0x4}, 0x0, 0x0, 0x0) r7 = semget(0x2, 0x1, 0x8) semctl$GETPID(r7, 0x4, 0xb, &(0x7f0000000480)=""/27) semop(r6, &(0x7f00000010c0)=[{0x3, 0x7fff}], 0x1) semop(r6, &(0x7f0000000180)=[{0x3, 0x3, 0x800}], 0x1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$uac1(0x4, 0xd8, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902c60003010220080904000000010100000a24010100090201020b24050206e3448f1654b20904010000010280000904010101010200000e2402010502000e2e0924affbae0d2402010102031957ed8d5ed00905010900040657050725010107010009040200000102000009040201010102000008240201000107000c240201000298095ede0d91072401390901001124020204005c4405003f243b9f9c28360c2402010701870b4e38bc3f0924020240001a0a0509058209080006f60507250102350600"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x4a4f2786ff0efd46, 0x7, 0x5, 0x80, 0x40}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xfd, 0x0, 0x40100, 0x0, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x4, 0x3, 0x9, 0x6b}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x68}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x407}}, {0x29, &(0x7f0000000340)=@string={0x29, 0x3, "1454ade93d6c9f1f91c2979eb2b156bbcc34a147489659fddaa1fb71b5804e95957afcb5364628"}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa471a000) 1m40.583086447s ago: executing program 2 (id=1488): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8004}, 0xffc4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000001080)={0xa, 0x4e23, 0x38d5, @remote, 0x10000}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) fdatasync(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000880)=""/7, 0x7}], 0x1, 0xf2, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r8, 0xb, 0x2, 0x0, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 1m40.501806154s ago: executing program 2 (id=1489): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {0x6f02}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1m40.403956149s ago: executing program 2 (id=1490): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r0 = fanotify_init(0x0, 0xc2000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xb147]}, 0x8) fanotify_mark(r0, 0x200, 0x1, r1, &(0x7f0000000080)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) (async) fanotify_init(0x0, 0xc2000) (async) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xb147]}, 0x8) (async) fanotify_mark(r0, 0x200, 0x1, r1, &(0x7f0000000080)='./file0\x00') (async) 1m40.361153583s ago: executing program 2 (id=1491): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioprio_set$pid(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x2fb8, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 1m26.002446682s ago: executing program 35 (id=1486): r0 = add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$negate(0xd, r0, 0x1000, 0x0) lsetxattr$security_capability(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540), &(0x7f0000000580)=@v1={0x1000000, [{0x2, 0x6}]}, 0xc, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x40045109, &(0x7f0000002240)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0xfffffffe}, 0x1c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x3, 0x8a, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000400)) r5 = dup(r4) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000440)) r6 = semget$private(0x0, 0x7, 0x254) syz_open_dev$usbfs(&(0x7f0000000000), 0x330, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000300)={0x2, 0x4000000000000000, 0x3, 0x100, 0x4b5, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3fe, 0x4}, 0x0, 0x0, 0x0) r7 = semget(0x2, 0x1, 0x8) semctl$GETPID(r7, 0x4, 0xb, &(0x7f0000000480)=""/27) semop(r6, &(0x7f00000010c0)=[{0x3, 0x7fff}], 0x1) semop(r6, &(0x7f0000000180)=[{0x3, 0x3, 0x800}], 0x1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$uac1(0x4, 0xd8, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902c60003010220080904000000010100000a24010100090201020b24050206e3448f1654b20904010000010280000904010101010200000e2402010502000e2e0924affbae0d2402010102031957ed8d5ed00905010900040657050725010107010009040200000102000009040201010102000008240201000107000c240201000298095ede0d91072401390901001124020204005c4405003f243b9f9c28360c2402010701870b4e38bc3f0924020240001a0a0509058209080006f60507250102350600"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x4a4f2786ff0efd46, 0x7, 0x5, 0x80, 0x40}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xfd, 0x0, 0x40100, 0x0, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x4, 0x3, 0x9, 0x6b}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x68}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x407}}, {0x29, &(0x7f0000000340)=@string={0x29, 0x3, "1454ade93d6c9f1f91c2979eb2b156bbcc34a147489659fddaa1fb71b5804e95957afcb5364628"}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa471a000) 1m24.880938032s ago: executing program 36 (id=1491): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioprio_set$pid(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x2fb8, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 35.577007461s ago: executing program 5 (id=1798): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x7) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) 34.558128864s ago: executing program 5 (id=1803): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x30, 0x140, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {0x2000000}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 34.372833249s ago: executing program 5 (id=1806): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) r3 = syz_open_dev$radio(&(0x7f0000002b40), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x1, @value}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 32.576873602s ago: executing program 5 (id=1819): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000840, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r6, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000380)='wg2\x00', 0x4) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x810800, 0x0) syz_clone(0x4200000, &(0x7f0000000000)="9b891c5fbbb33fd73d71d16d37560797739c5c082c988d7f4c8f3023497187d3c61e0d7fa8c5b6abb975a75885e53cc7fe319833e75cd6ad91b3beebcbe59a1689d7594d69eed34ceac9d16cd284766325a4d1e8cfdf17adbc0a2349523aac811678a750fdf3ba04ebdbcc148b937b5292ba4122ca859f3efef3b9b19d5c3e244a4c74add2dd579ca0afde48edb52aed7b630fa7b71e475dc59aab6cb8b7bfa2e3d3898d841ceb6973d3bd02dff088b507abd9203eeec464dd2f3c54dbe718ae79ad0da8b3102a763e8b3984908c3687a8457662b679cf494f6c39615e2080b8b2459ccea69be280da032d3053c1388e49d9", 0xf2, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="dcdf5a4ab681f1b0e2b0fdd45644c80668b66262f6118b4ddf2597c5d8eef1fae5b829fc74cafdebbee940312f3db83e99b20a960283ef70d8ccf2647b6db0ecbcf9444539537f1b2b4fb60705a1ae98a442fd90d633a27e4b006d9a53f4dfb4b802830373116b083fb53b18017984eede70a3f345c787269a497b790d51eb90c6e2200ed931c844f760199e06bb29620eb6eb36c97be90b3ade60efef4662875909e129b0ff4de4241a3ffd2284661b46ca508266f8af8a9ea2ebdeee5abe873500d51a5c501d7b9856c99d71ed0464e88330494e454ceb3e27ded1a7a528f576dda7") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 31.367407289s ago: executing program 5 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000240000022cbd7000fddbdf250600000006000400000000000600030000000000060003000000000006000300000000f934abe5e9111ac100"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xa0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x220002, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302", 0x6, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000003c0)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x662, &(0x7f0000000880)) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000000c0)) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x8, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20001000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x4, 0x7, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xe}, 0x7851, 0x1, 0xa2, 0x8001}}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x22}) 30.761450632s ago: executing program 5 (id=1824): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) shutdown(r2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x16, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 30.261113839s ago: executing program 37 (id=1824): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) shutdown(r2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x16, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 21.167865559s ago: executing program 8 (id=1844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00012474617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 20.947645637s ago: executing program 8 (id=1845): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff004) (async) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x81000000}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x24, r7, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x24, r7, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYRES64=0x0, @ANYRES32=r11, @ANYBLOB="140004006e696376663000000000000000000000080005000600000024001780040006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012dbd7000fddbdf253d00000008000300ba0a2e9203ebf57e8b81bb579dcb4fe5d9e135a3e631847730b2522998e4a54c7ce9b1bd28e952472be682917c55409ab449e3560b44e1103ca0859ac87da357c6aec65322f71aa2a96f2dbadd7a44a19e23d5b9531e8fdf9b0e24fbaf93405beecf8aa9b670a8dc6e003263f5f24521f7265471d98476a0bb98ec8d8f4921090f0e932e6ee4eaf82bb91fad9d345c80056e1c9249e5d832d2e9f50a63db8b317211b49b718777ea599387b6dcaf15a2c09ea3e5bef061c7113f35861cf354a60147181b7c861759b5a812e90d9f498823b70afefdc92f2015b7b1b0a2b6f6", @ANYRES32=r12, @ANYBLOB="0c009900068000003c00000008005d000000000008005d000000000008005d0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x881) socket$nl_netfilter(0x10, 0x3, 0xc) 20.697221371s ago: executing program 8 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x88}}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x4, 0x10, 0x2f, 0x6}}}}}}]}, 0x4c}}, 0x0) (async) syz_80211_inject_frame(0x0, &(0x7f0000000280)=ANY=[], 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001143b0b"], 0x18}}, 0x9ee9fd74460f2f8e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 19.799734383s ago: executing program 8 (id=1849): mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x18404, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x400000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="5ce900008080", 0x0, 0xfffffff7, 0x5dbcc8c695e5f418, 0x3, 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0'}, 0xb) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 19.137184244s ago: executing program 8 (id=1850): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) 17.715712772s ago: executing program 8 (id=1852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x1, 0x2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="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", 0x1000}], 0x3, &(0x7f0000000100)=[{0x78, 0x10f, 0x1, "dd1d1fde3560e7f7abc35b2819ddae7d390c059e0cd6881b5f50d064263e7c2d61d193e456beb7842f5370c3392075b856b9b163f58b65ffd47396c3d9d84edad120bd8faf94e5f846ed7f0bc71c75d6043d8b71c057a635ae720ee33db25e1675"}, {0x78, 0x119, 0x4, "5b368c3c5eff4f0049a982aac04a0507b4a41f681c62970a6ce777b287bc9e590ccbc314d14da69760f4917f2dff50d110d0fd2e5db0e32e51eddc3a99b273c420b6700b41312a2352ac982607915eebd33aa8d80c473cd8fbf7105dbd1c0c741f81"}, {0x60, 0x6, 0x0, "22a75ecce8de203a289a083e0267a01239a38df0f52cab8f1b98981a2094436e2fc79809cdefaa8824864821f3af1e7997b7f474f8972d30474eacfc375db56a0a1fba964fc9006cd94bd2cd492f"}, {0x10, 0x108, 0x5b0c}, {0x48, 0x118, 0xfffffff8, "333f9a229325098e1ceebda369038c5030f8199ab635ee792c094dfaf45e77ace3fc3d3fbfc3a6643f40ef0786d5ee0e2668b18f"}, {0x40, 0x10d, 0x6, "692c136f1d10ca9b1f505feba1661043e0e400788ee63f8569cb4b26d9833949dd09e78ad9c95fb8485a2cc5e821d6"}, {0x50, 0x103, 0x10000, "99a9e5ddaa83f49ae93b5a2d39398aa5cc7ccd1dfdaee5b48dacbde7c935d107ecca028d6a9d49365aa9a8cee78e618461844a3d148e79b0d5"}], 0x238}, 0x4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f0000004380)={0x82014000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000002340)=[0x0], 0x1}, 0xffffffffffffffe9) sendfile(r6, r6, 0x0, 0x7ffff000) 10.458213783s ago: executing program 7 (id=1881): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d5a0120b8073a4003010902120001000070402a09992dd05f90bf7e"], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 7.307901598s ago: executing program 7 (id=1891): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x7844114b692cf050) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffda1, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ee4b3d41b1b"]) syz_usb_control_io(r2, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 4.752049631s ago: executing program 3 (id=1899): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) r2 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pwritev(r2, &(0x7f0000002980)=[{&(0x7f0000000380)="b86a0fd2f1e7e9cc", 0x8}, {&(0x7f00000003c0)="3b9ef9f06a8c646bad5609fb6bada845f12e43efd5681bc5e7575babb2f39d97ae1eae8a9928c61453392ce3b97062cc297d59a40b3f88cb480bb0802b987b202dcc962952f36fb1c855258e0f6ab192f020bb7a22e4de48e553dfbc8a9d7b40a77122bb06bf32212a84515ed830f5692503942607e56bc06ad70bc45886bee932042e78ba9ddb0d4e313ad2c6d1d5316850c5cf7ea40bdbd0607ea435f3caac9695b4e2c91ecfad0b64", 0xaa}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="97215159a15b9574cd7f8fdf7dc4e6e1b0f694c0f8e424a3a6dc6c184240d106777a65ac423bc438e32e2f519e6330fd7f3e3aefdb3cbf40a8b315044cbc4896eec932987d85202156ed9cf9ef475f94b319450e7092cd6f366c28da6deaec6655dfd8988bd72346ccf5afb44aefde053ae3904666107bd7c770072817a91d221b0bc0a1999dd596cfbf0cc7a56d4d86689a7908c22ac6ae0a869758e692041e9a53c6213c1d4bad579745c4e40bde5935e2f8f32b6e6d11cf398a1a00cf4eed68c6acfe54e650dea63a26c631a6dec4f27f68519ebd45e2cee94d71ca36e890fc", 0xe1}, {&(0x7f0000002640)="21ff8277bbd358d0999a84ae4d0dbe34af7258f26c9ec2c54607460ecf8ee32b3a166def38302c8a381a618a5e1c980aff95a6cc472b864af74b5cf073d22f7969c9c0cce2a2", 0x46}, {&(0x7f00000026c0)="dc8eddcff24bb5fe3acd1a9c0d9f88d63d6301a18371d539b519ce61a76cdc86e25c096086fac9a14cea2415367d4939307118ca6c5482821fd23f92c6418211b806674fe2c82ec5fa1d50cbbdbf31fb5350d93517f3f1210c68ea33c74c682225346727b0761f5d4b764151e9d9be81f64a1100e863435e2f4d1481565c9f96b223ed9c56face2d9e39e44cdeb2aff1de3e5ad7c7566418227949", 0x9b}, {&(0x7f0000002780)="757dc45be434ad5f13788df167f8d0fa1bea6a52e85c18bd35a26e72c8466fd11006656c1dcd61dab0dba7f785880365c8093fe4e048921d9e3cbd0bb9e904e8993bf0897d7bcd144b46b10b1a9f23247b82c9f168bf57f2526b89a487", 0x5d}, {&(0x7f0000002800)="1d71a4ee34b3d12260ae0e1ff1a2e83a4e16db805c4a6a423343e2a8ff10dddab528803f04db5ca27abbba7cf22bd59eafb51dc4f42ab1df9c2436c1b8a3a515fa0e2011210e5f2c4c67a7c3791cfedf84c2e3be7de1b48e0a698933017ffb0f5d952c50d0177007ce2ee04d119e48cc98246abb22305948f4a57d6dcc2eeee2c805e08bfd2a45f6d3d62b9f", 0x8c}, {&(0x7f00000028c0)="31ca89821979cc74ee86a551e506dafc92fc9fcfe3793d680ebc7493fa41b99e26741e9ae677f0f44ef9b14e23c12704989f8937f1bb82d6217f60691d7d4edec7b8a30b840671948316cd27544f1dcec849d4e8981ac24085480caacedaf2731ee86989ddf24327cb69319690b255c6ea5621618de4e828a8910fb06b72708e8e57545935eb983117445f3186dbc4fbb9d4e89a89ce69089ff1a59bd5159dd2a220bd6f8e0f93be88", 0xa9}], 0x9, 0x96f, 0x80000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x6, 0x7d, 0x8, 0x0, 0x2}) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x2) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) close(0x3) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 4.259253261s ago: executing program 7 (id=1901): waitid(0x2, 0x0, &(0x7f0000000d40), 0x20000000, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 3.747884371s ago: executing program 3 (id=1903): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0xa8980, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000003"]) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x4902) (async) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4008700c, 0x0) (async) fallocate(r4, 0x0, 0xb4d, 0xe) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x77, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a4400001020301090265000101020005090400810302060001052406000005240005000d240f0109000000831f0000001524120500a3"], 0x0) (async) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64000000010028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100a54e7c10b6a09b960004fcff", 0x58}], 0x1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r8) (async) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010004000000010000000900000020000380140002007663616d3000000000000000000000000800010001000000fc0df35df2ff1e258447"], 0x34}}, 0x0) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r9) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="0000a5f25b500000000810000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 2.982190847s ago: executing program 7 (id=1904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xd) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000002c0)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xd) (async) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000002c0)) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) unshare(0x22020600) (async) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) personality(0x5400004) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) (async) 2.891454742s ago: executing program 3 (id=1905): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="144000001000010000000000000000000007000a40000000020000000900010073797a3000000000140003800800014000800000080002400000000309000200"/75], 0x68}, 0x1, 0x0, 0x0, 0x2000c815}, 0x88c0) r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) sendmmsg$inet6(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x1, 0x8905) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/211, 0xd3, 0x0, 0x0, 0xffffffffffffffc2}, &(0x7f0000000180)=0x40) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2d6465766963650000000065745fe972696f202b63080073657420972d5db792789d3c626c49f04585577cf962dd48d6e1b2692ca243ba182fb85245078142f3fe3d42f77051b49888d3391e3e39833940464690bef4b2f89033767cf6a45c390ed467ae501849a7b76647f95d786a15958e82d3646d66a0"], 0x1b) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000280)={0x8, 0x5}) sysfs$3(0x3) 2.632131304s ago: executing program 38 (id=1852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x1, 0x2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="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", 0x1000}], 0x3, &(0x7f0000000100)=[{0x78, 0x10f, 0x1, "dd1d1fde3560e7f7abc35b2819ddae7d390c059e0cd6881b5f50d064263e7c2d61d193e456beb7842f5370c3392075b856b9b163f58b65ffd47396c3d9d84edad120bd8faf94e5f846ed7f0bc71c75d6043d8b71c057a635ae720ee33db25e1675"}, {0x78, 0x119, 0x4, "5b368c3c5eff4f0049a982aac04a0507b4a41f681c62970a6ce777b287bc9e590ccbc314d14da69760f4917f2dff50d110d0fd2e5db0e32e51eddc3a99b273c420b6700b41312a2352ac982607915eebd33aa8d80c473cd8fbf7105dbd1c0c741f81"}, {0x60, 0x6, 0x0, "22a75ecce8de203a289a083e0267a01239a38df0f52cab8f1b98981a2094436e2fc79809cdefaa8824864821f3af1e7997b7f474f8972d30474eacfc375db56a0a1fba964fc9006cd94bd2cd492f"}, {0x10, 0x108, 0x5b0c}, {0x48, 0x118, 0xfffffff8, "333f9a229325098e1ceebda369038c5030f8199ab635ee792c094dfaf45e77ace3fc3d3fbfc3a6643f40ef0786d5ee0e2668b18f"}, {0x40, 0x10d, 0x6, "692c136f1d10ca9b1f505feba1661043e0e400788ee63f8569cb4b26d9833949dd09e78ad9c95fb8485a2cc5e821d6"}, {0x50, 0x103, 0x10000, "99a9e5ddaa83f49ae93b5a2d39398aa5cc7ccd1dfdaee5b48dacbde7c935d107ecca028d6a9d49365aa9a8cee78e618461844a3d148e79b0d5"}], 0x238}, 0x4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f0000004380)={0x82014000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000002340)=[0x0], 0x1}, 0xffffffffffffffe9) sendfile(r6, r6, 0x0, 0x7ffff000) 2.587767349s ago: executing program 3 (id=1907): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {0x0, 0x20000000}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 2.469623076s ago: executing program 3 (id=1909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) times(&(0x7f0000000140)) r4 = openat$cgroup_procs(r3, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4d, 0xcf, 0xf4, 0x8, 0x572, 0xd811, 0x94e2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x0, 0xb3, 0x5b, 0x1e}}]}}]}}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) syz_usb_connect(0x4, 0x1162, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0xaa, 0xd0, 0xca, 0x10, 0x2304, 0x236, 0x4a46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1150, 0x4, 0x5, 0x1, 0x180, 0xba, [{{0x9, 0x4, 0x15, 0xc6, 0xc, 0x12, 0xb1, 0x9e, 0xe, [], [{{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x2, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x5, 0xc, [@generic={0x9e, 0x24, "851378667723613230e1e4ad4485f176ef2c7e957300a901e14d311158d81bed2f38df760ba435f7d23070536d8d9f74978f1369003daf4e9f2e8ca9474114a71400e0edfa6cd0135c13d7e5dadda6c125b3f54f7f1577f42b711495ace3675cf0f7370dd6b3dc51c1068afe7b5306d0a9da7e405409c1cf69d2da594407e595a3d19d3e33ae61f0a2893c9ee28c13f565051675ee4c2b367acd1b4b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x4, 0xec, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0x9, 0xe, 0x10, 0x6, 0xdb, 0x6, [@generic={0x1b, 0x22, "fb7c4b07595d4e9f1eefc073d659650418d833c53a4f77d719"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x4, 0xff, 0xf}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x0, 0x5, 0x6}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x8, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xf9, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb6, 0x101}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0xbd, 0x9, 0xfa, [@generic={0xda, 0xf, "4aef1a93f52c7c569a1e5e7d1099e03fa0590d5eaffff0b970720f7dbea2fd4a6e80dd2b21f34b6fdc4a0005cef9caabb303066c12520139fda6872fdc2e6d757631e4fabba458ecf82312484669770f775adc4e60c3b1ca387f2ede5354dd95b400b6639789a211c42f54d89779432b7cc3fbc3c381ea3fcea688ec1f72d23f398f5b96aadb2be0a360619f3b93ca468f5d8af10ed5f0292d490759bda05f8e24db26f28dfa1f30044ebfe405c30ae951d94dbe155a1095c9b0a54b18d8fec1291961a27ce2dc795ab3e6578d0edeba45b0f65f1ebb7c39"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x8, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x99, 0x2}, @generic={0xa9, 0x30, "715943e4aa7ba84135025d9d32e5a3dfabba34c10c5aa2d03a802b6e6b04859015c3dda37cedb02a96bd56421515cd961a3572bcbf6bb470070c337d69a9334adc0eb82395cecdfc4315506b0e65ba7c70bc674b14a72cf183652e3dc2202236bf0f187a888a9859f2b5671d7b36c85b43d1471525c773396dc1e4229f1899df399f9c99057f535c19935d48b99f78c67d4a9d7257d1c0c2ba1c6cb2e4bbeafb10a3c5a7c6a498"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x80, 0xf4, 0xbe, [@generic={0x16, 0xf, "0d6e023e8f93779bdaf54ba0683e000560718f5d"}, @generic={0x93, 0x6, "322fa56ed3ece2a0d444b14014c4b43434f658beb352c73b8d0009a90c66dd14a28fd467d8fe5d9b85d4571fc40629d1f31d6ca8562f6ba8d067d55de27c56523f45d954fb64331f2a07f0e5e108465da80bfa1371d0901a3d7b4e5147ac8d8bc759333b967e2a32138d70fa8e83d1483987aec8e099b24c197525bc2f1931432f327538f80dbf02b767c7c6672c990175"}]}}]}}, {{0x9, 0x4, 0xaf, 0x9, 0xb, 0x68, 0x7e, 0xa2, 0x9, [@generic={0x97, 0x8, "d3a839ae485efe1d3702698e0ecdc62f693905e69930aea87e6be550726b2fb3c30a5c234c73767521e6e7e451814e6af12d760e8864d8569d31ed04896fd4c2ef824704aace445a8bd61f8412bdc223955682852bcf985e7e98109b292234a905e7f9cc6164490daf1181e72da0c9f861538ffa5a75ab9353b1d4f859561c2c75a1d0ee21054a9d0eda085246880df531ca443102"}], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0xfe00}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0xb, 0x4, 0xee, [@generic={0x8d, 0x11, "851daa41afcf0b0ca226ec89d6dcdf15e9e4faa1e83239556b4a266dea96e117bd8a1956c3b89aa7bfd0da2374f220ec9f34235c50d1df3d7bfdcbfaf6c80cb6bfc441c7aa3fd065b82ef97748c1a35fee5a30287c7235d6d0899e8eef281e0816a54c646dbc200921bdf7698f82e54f72ee38108a82598f3cd542efc6cd32eaf9dde740da54c9b4bfa3d4"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x4}, @generic={0xe5, 0x24, "e3eba4a5efa4c1c7c042d6e7574d74658fd576e6b0c69ea6aaab5901906721a01ca1de70a8a1883c6e4f573c59f1a28bdc15af7a3273877981fda9d457c08897674a7674c44892213ef0c47aa214449c4abbb4b4a3c8df8d6408e9bbc91e7d73b707c6522b315c96728669416574ecea7559807806dba6415b62904a6762885983263cea18dc1cb865678b8246183688bccdb25d90d31eec5d423c9cac8495819a21e5569f54dc26992e17f5cec6daa8a66773c3d057b65e034b82a4bf8998308bbd98f8bceb350c1fe6b909ee3fdfae4172a289d88e0d46515db5fc3bb09810242263"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0xfb, 0x7, 0x1, [@generic={0x5f, 0x8, "09150153bcb7df1b661894a98de871222c0a4f86f9d935a20558cdd73940c0f81b563fadb3655f7af739ce5312788faa42b9ec66166143e814ea0be14476a589e566a4e7662b14164efe3e0ffe412169c5f6a1a41b1cc0793febba3a3d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x92}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x4, 0xb, 0x9, [@generic={0x4d, 0x2, "6c8839d7c88261504b3a10011590fd54db8ee1d0b5c6041c4c7f5a7253ffb0b9e55b1f59686fb79947693caaa9373aae4098524e0dfb9c8661f3df92886de406a87e7467fc77934a770807"}, @generic={0x35, 0xf, "3c37ff0c05991f7bdf63c49a8dfd6add8ae094985be2f98d220a2de5c69387c65962065e183ab87c099a5cbb710085d709b71f"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x10, 0x5, 0x6, [@generic={0x9d, 0x31, "7504d96f2de003aa0115d35f0f1b788dc71d245d3ba254d116c8db6726c2618ad2c329f6c91eac5e32c4c7c43724855a9508042f81d03d3245116b7fd5d8de9890eac996011485c0f3f2fdb17df2f9775c95ca815e84b0914a97490af7757ab36dc4835b85a50e96146c621152b0ad39981d92f937f50487baa4cc8e3150069cfcbc56793376fc709a9d869ac1a8ce94adb6be55a1cd18b718039a"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfe, 0xe}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x6, 0x7f, 0x6, [@generic={0x49, 0x8, "1d8d0babc1d446bf41b9243659c4afca52f5aac7ee0180ead40972c6279893ba88a5dbdded4cd81b74894ed07e1cb6c5b385031b9196a5f94ca531ef20895b6447015ba91c9154"}, @generic={0x55, 0x7, "6924d0bab79f38a18f69447e6353c85080ee8f3adeffd76eaeb784875bbb5120f13ebd7cdf4f0562f8f1f1df7227b1bda3924098b47981eab232300c955d6e91f864b79c2153c63e36ecf820db08abcb8bd7f1"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x0, 0x2a, 0x1, 0x14}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0x3, 0x7}}]}}, {{0x9, 0x4, 0x13, 0x0, 0xd, 0xe3, 0xfd, 0x12, 0xff, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ef40902d7f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd905, 0x9, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xad0}, @obex={0x5, 0x24, 0x15, 0x6}, @obex={0x5, 0x24, 0x15, 0xe4b6}]}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x5}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x1, 0xff, 0x1, [@generic={0xb1, 0x23, "088039871cfc37f6b1067018236a37255895a2a5734c738827b2675e655336c59ecd9858dccd801c4f2c82c7f8c8857ffa665b160353aedb28fa2a41bba055bf28efc1a7ae5b473b1c79f0193bf0ddf656c623c73c34f0164ca3c51d4dd25e25e462e3d0e4ae9a9add55da588124ac9da85b042318bfd29360d36f0f366bb520278a4f011a1540125cb14546f1ff71c3ab9f4ec92e598ea01b0c643ffa35ee5622b1e95fc12cbab4b1d086f6375d3f"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x35, 0x5, 0xf1, [@generic={0x39, 0x24, "65537e4a46a69eeec4c01c1887b3459bf960a65a5f3c64af17bff4f919f59e425dc30c1c45d51a5a19fdfe5c38df1ecb45deebe8d41c15"}, @generic={0x50, 0x31, "12d39e53493397f485f6d6b1586a26d177a3b8480d57b1f967b4be56f3bd24cfdbc66cbed68b0a727573d56fe19f33e44006e15b940c25c5267ae08efa483dc58bb97fcdb869bbdf6c3134c6fa36"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xa, 0x3b, 0x8}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0xaf, 0x10, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x3, 0x7, 0xd}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x2, 0xf9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x9, 0x1, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xf9, 0x6, 0xe5, [@generic={0xc1, 0xe, "894e2ff79129262f2f04f4d6d1129bf15237c1ed15b02043fd0ac0b2d4296fcba4a133f4cea6b367aaf6803376922a98f023a0e13701d3d93947aa7213270505c56b7403afe93a1d8eb6b3f9f0b8fc1776549aa4b1539274d9d8bca61afcca37ec7df6eef85c7ef18c70868c1eb12351f4e1ef722d29315d7f27c0925ad417d2e51509484d352aca01e9ff2b6607e5b14286b629a40078aaad6bceff2face8299ead53d396e9a0b39fcec2cf7e5151fbbc370f2f16aaf73344200e5ad9811b"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xb, 0x1f, 0x7, [@generic={0x6a, 0x30, "4f98930715e573cc881726d80eb32b4460182116cc70125d7765dcb86e402edab3858fc05c77d3a380c7101887c374130dbcfcadfc585f4412421c69d8ea783aca3512459e7edcbab0c05ca361ef2c946a13353002332f11242625eb12e813fede898ba5b68572c6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x5, 0xf7, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x428, 0xe, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x2e, 0x1, 0xf, 0x95, 0x8b, 0x2e, 0xfc, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "4ccb"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0xb, 0x0, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8001}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0xb7, 0x33, 0x1a, 0x7}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x5d, 0x4, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x6, 0x3, 0x6a, [@generic={0x6b, 0x21, "6cb79124cb49c28fcde87c7e5e33b320b88aee91e2fbb02508f5f107a8770552455fa653393c12c778ef00e9bec95b7274d122239afebcd178f3460f2607af42875501a0a7631491c84264bbc88e6966f548c6ca49a4a8e3af5056d8c3486bbead792ede59f9a45289"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x2, 0xf, 0x0, [@generic={0x99, 0x7, "95d506beeac11384f15e8074ef6fb6469ca75fb6433b7568bdb843910e839de8e4074e05c28ae302f717826a0611a27f898c5ff4f3cd47646fff61e14450540a2a4e4197d5bb75717c8e712577b96688bb9373cc7526c8a0dd85dd254d07860b1d5c8cc28d2b01c2b0e3584f9d8b9b9ed824f9828c46f372259bc0301679f2143cc5a3126d169691b100322ee9517c18ab11f257afcb57"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x410, 0x10, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xfa, 0x8000}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xe, 0xc, 0x1, [@generic={0x86, 0x1, "98f3b0bbd3ecc7a8f1def667c0e1c087d9b3a5e2f3238581d6ea6a325e437ae55c7a2499e83d23c918e496a1428d9df5c61b093031c39a011d42dbb6c7d9b50edcb64b57b8933f8ef74d71d05645f0bbc6133fe7b43b125df2bef029215f00538eca8ac0c10c969a6d85a303a7a50be414e4c5f96c1eb2b843215cd624a55de485dc14c4"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0xff, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}, @generic={0xa0, 0xd, "cad8bb6ca965a85ddf79dbdffead4afaeb313cbb1676968b330e0cf12feeeb3f1c4f8518ed48b9176c64a3876ddc1cb12030cd4eb6b3edc6877eaa074f794f5816cf32576763f44b78e79ad66a78883e61f917d50474da949d41225e3ff7d57088bd5d5a3e8bbfc8565ddf7290a407a876df565f59a11589178cbb3168d55da6e0815c76a524e07581fc1421cbbb15c591189fade2c869583f9a3caa3f24"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7f, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x95, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x46, 0xf7, 0x6, [@generic={0xe2, 0x5, "77f45f5e6afab9d8d5d433dad26138ca6b47765c530fd84bd35f300c418890a9388a271be394e5c24185d3915abffd31619b9378ae40fbe8fbb286c2248766a7e80228c87e4489f8a61a3a7070a21bff922d5d45ea4bc88ebd769504f0459d1c54c674403189d8bdd587a4ae5627c746da4edada76c8a2858d8e5a91cd9151f7466e69f17527455d38f1324af77d2beca8e98d85c1ef98e13129ceb0ea9f3727ac8378569742ab5d6d44360b9b7f3d0a53c558b6ecee7ea823774449d1d815be6ffda6775338d217cf20ec55d518344b672bb10459c5d329b93151a3e27b6185"}, @generic={0x6d, 0xd, "1dfc9351ed190bf820ff6c4e2a21769fbe9df3afedb8e11f517c8147ea95adf61defc47eeee10079273f33d61d7650bb762d88eb38bc9b8a6a7a1db7e6a165f5010e5f7fa2706daf27796d23f700828cd7e88a804b5db0e7fc3a56002113e858c8758e65c0d1d260921a3f"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x8, 0x20, 0x6f, [@generic={0xb5, 0x7, "fecf77205daa803142dabdedfd742931fc45198f593f863ef5ea02dafb7a14908aee539c746647e8c44dae60378e0941408ea6e09d8bd9d7b039583574fa00687370dde3ebd421cf5b10cef42a208c65158ceddb50879d535a1ba22b566a5c9694fa182cfaf585e0ba79702444c439fdb785a60e14ca23a6f84eae729704fd2a50d4a3b86c414a173f364f28c9ff3e9a021127c182ed19f2414c56f12c276e241ffaba33ddb9c8a2645674bbf9db284f11ab3c"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x9, 0x9a, 0x8, [@generic={0x78, 0x11, "4dc708ba4c533f329f8aa4fc014955f178a9de98ccb0e95f8ff98cd829f8a3923e06860b7ed93f2b2e5aa502769bd965a17758dca7b92418e48c6bfb01d8bcf0222e723dc2b99f84374db862ed0291820804837ee2a8f535ea8432a6eee5c9d2ab32338cdb6cd6cd93fa87deabfaa612cb0a6188f72d"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x7, 0x2, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x4, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x5, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x7}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x9, 0xfa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1000}]}}]}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x9, 0x2, 0x3, 0x20, 0x8d}, 0x26, &(0x7f0000001340)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x60, "80eec5a626075c1461b3f8f17254eb93"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x72, 0xffff}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x813}}, {0x4d, &(0x7f0000001480)=@string={0x4d, 0x3, "9d60f3211e5d7dbf88cd3fbb8f6dae113f54804017e46e799bd85cc4f226473690728145e54af79274f6df348dcc7c6afc73416957481a61025994f59ae82a74dcb6e65a3580ba7084b3a6"}}, {0xcf, &(0x7f0000001500)=@string={0xcf, 0x3, "8826d853e2502c2dec94ea4d1e06c15d73f290f19d2ee32ce613bec047225629d5c0114770b62e7e2553e504407e85dce8e10629e560daf9fe8eaed5becdb88ef31fd41972967b4480c50d7c6eec16ee630db9a49e0681cfeae311ac01bc4a90073e85064e22b22e9f97914c54657a31a227e0180484e16a2e340d8b1708f96e108c1387607cd47bede02670aa3eb64be6314c262fd28ea4cc70ea8961c451dc935e3d765caa75c559eb6e9539be0ec6bebf3ea3917a372c51dc30358d44856ac422953cdb9770f95f02a75d44"}}, {0xea, &(0x7f0000001600)=@string={0xea, 0x3, "1596c8932b3eccf77aaad8674be4253dc512d20505e0361f1296039d6425f8dc6abf2f4f7e201fe0cc3402e3f89d8cad4da6839aece684e9d9b8f50ef66325ce4837e2a07294656cc2d7989d118dd0a50db64237552b99839c8c12614a27b2d2d70f4a928238ea51ed8e94b2481501bf296cf1149838afaef9f1d86f5b25336a475ca23a2c9b74d409ebeebab4cc16c6a12c65e82b29bbeb63f94bac8d14a2b9dc9b4dd8bb2a08081633fbed95654d8525f32bf5c724c5c4c03bb901ff17f8d30c3158c663ccd981ef838c0cc9990be73c14a179b2f4dd394678794bc919c6c048bdb1336d659e81"}}, {0xff, &(0x7f0000001700)=@string={0xff, 0x3, "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"}}]}) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x44, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x4004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listen(r5, 0x8) r8 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8) sendmsg(r8, &(0x7f0000001bc0)={&(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x2, 0x0, 0x4}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001900)="f5a1260676a4e6e007b893bcaa0374fab9775b21e8ace866f25dcd3cd7f3478fe604e66c091d49c4f9dfc564bef9051900e9340fbbc7beb4c32305b46c7fd58512655eb2496b6f5bb2d1198e9df8d9920805c40e8099996466b29443a0ca2063cd85f237bac5043ee8cdcc5dfa76b074ad95d805be0c67ca8835adc24cdfd4b441326b7da109fb97cb3d6fc0a01feb3e9e74ac6671ed6497c35d7f298fb9f36e7fb89cd3ed18236f11f248f1f2c2464c03883be832f3c2d87e8a33e8136f9b8d6a141363c96aea637d8d82a25eceec5db95e9eca828809f2a9d6bcbf9a26e8ad2a763e20d72e04dfb451738af62cc076", 0xf0}, {&(0x7f0000001a00)="1f8337386cd170a5211d17bc589ab20d7f27784c91cffa018c63c21b4071321027e7b9970a5bc2b89cc97f0ae37193ef58b04531ed9021e0093010c6064c668f916e373a48eaee6769e1f5d0ff3b10295c5df5e82b612ccb3b1330229a7be34ebe13bfae065a32a085929e524f45ccaa2d3424bacf", 0x75}, {&(0x7f0000001a80)="f45ff1e42ed090b6a8359a98a63e3ab8bf5e33417996264e025e4dd7ae657d72dc19b1d25946c078f2f45f302063b357cdad4ca4082af4ff3709722e49e3cf1ba8d75e210c9ededac4c59e314b2db8aa874c3bd758897c34e704d4c925ae328b803a8fc67c0b58216a164b3568a9d23c8df665bdb2102df71cd3f418fd2976c23b876e31cc4011759c907929318679de4da51a755d4ea9bebd54471208c31e363d018178c854ca808ad425a854ee7f2edab09cb6b51e00fb9731c16b9abbea0418", 0xc1}], 0x3}, 0x4008800) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x17ed2459, 0xa8801) ioctl$LOOP_SET_DIRECT_IO(r9, 0x4c08, 0x9) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x0, 0x0) 2.43474169s ago: executing program 7 (id=1910): r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 2.231798695s ago: executing program 7 (id=1911): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "2805560e5b656dce36b0789feb1040b182887da69257e7407e935d"}}, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x84, 0x80, 0xc8, 0x0, 0x7}}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e40)="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", 0x4da}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x20044040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000040009"], 0x184}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r7) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 1.049473664s ago: executing program 9 (id=1918): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 961.788502ms ago: executing program 9 (id=1919): r0 = socket$inet6(0x10, 0x3, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2], 0x10, 0x4048010}, 0x20048001) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xf7a992b43b2176e1, 0xfffffffffffffff7}, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000073030000000040e8820d6cf6a2df6644d33b4b95000000000000000000003210"]) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4060000", @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020b73dafb72d13b2a4a271fe7f0000bd2dca8a9848a3c728f138d509e90000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b48addf27e3baa000"/85, 0x55}], 0x1}, 0x20000084) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x810, r9, 0xf8ff9000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000740)="26f403d69518d70fefde4754772ac1114462132cd5950a1f1c96e30da11fafb2e5984f1439b5fbeb1b0caa7d4795beca9bf5b8f54688d4c91038d7621720ac2b60c559b96f7d62f05fcd092161b1dc7b639f1c26a5bf15b1fa9f465d222cb10f942c6846e6b9e604a90181001202e9452cb5e3d14bcdb30ea696b5f0e18cbe85485c53c8d217c6d8e5fb3e105bd9cfaca7dde0db0e7c2171b573fcbd6a26bc0158681ec8ccd0a8641ee1e80a257fcf355683d6c69eeaf7d57d958bfc65823c6b8721c79e6286aa0d11064270de1d1218c940045abec97cf9", 0xd8) (async) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020110070e0000002dbd7000fbdbdf25040004000a00000001000000e0ffffff090000003e72bdfb050008000000000008001900000000000a004e2400000008fc020000000000000000000000ada7af740000019dd095710a004e2100000101fe80000000000000000000000000001708000000"], 0x70}}, 0x0) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) 687.686481ms ago: executing program 3 (id=1920): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x46}, &(0x7f00000000c0)=0x8) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) io_submit(0x0, 0x8, &(0x7f0000000900)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000100)="a19b24bb057a7a3186ffed4317af5c6bcca41ebcbc939b8ef37be7e7a55db6b58e0fa8e72a94f4263a1d23dd08977f72d1608b7bb910213c39afcf3ef6ddeaf8204ed6c0fab57549ab67a91ec39e09193476b7c513c82bd3a1e0a9e73824c759d9d8edb59551d4a4a362f0f83ad2b616275c88814323188bca0ecbcaf9c5", 0x7e, 0xffffffffffffff01}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x80, r6, &(0x7f0000000080), 0x0, 0x7, 0x0, 0x1, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f00000003c0)="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", 0xff, 0x5, 0x0, 0x0, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x1000, r0, &(0x7f00000004c0)="711bf266a16c9f53bcc922930a5549bd95d1563f3ebed07c0e46a6b7909ea1dc51cacd26d951594feaf652bde82a854df1c04e8d61980ab8975cbcab9a674b48102f5900cd2f65a27be0e88ebf66999bf19779c3841a6a11321b8111efcd6d603d641cfd23a728f93fd72cbef4a62753acb4bbc35960761803c74f67c7983952e9", 0x81, 0x8000000000000000, 0x0, 0x1, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000580)="e43c9daea560dd711496d1baf6f1c8901adbc7a022adf360acd123ec6f176dd66607905d52f8e926dc6fcb69d04e750c51c0a6351477c74f205b6eb0d7a9b71d6774e4ac00ad99805f381ea8bd080968242ea8931528f165106dac59d17fb9aac37a475cd8bcb88f8cda770fd07c785dd7631b2aaf63180844181a59a57ca9c849cf140cadb8bf77ce337ad8d4ff9037dcf9ad920350440983e2cf844b60d5f451bfbf9f72fee4ec04d23cad46762551fcb3d4aab479", 0xb6, 0x8, 0x0, 0x2, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x3ff, r6, &(0x7f0000000640)="c505ab16cf972ca5e74b4ca74177684ed190ff442f7b482ece89a5119a3b3882f132a6378e48e80cfdf9188e4667b7552c5cf5f2eb0f75bc4b30013a1324208a0ab2ce6acaee3799c91480226b15d2257e", 0x51, 0xe, 0x0, 0x2, r6}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0xfffe, r1, &(0x7f00000006c0)="30d73f2c06725d5fdecc0a17fc0b3268b7a4725e64c5d9cd66b3854f4d0d85d1cafac91bd2f67f4b4823deaf8e01a7c03ec41fcf95c0ccde3758a1d51346dcd89e1cc4d31de20c10dc4253f214008aa7696da9b81387543f454826ebcee88444301b8bf8b3ef6468c8c9eb98030def57c7e741436355414a073562fca817a8e04323df727be189d2e25cb30040704b02f702b25225acb4d1d73bbc5768fffa1d7a97a799d908d98121e52e4caade97c7913efde2a5dfcaa1dbfed11a34f6f5e184fd9572db1261d2c88847dd", 0xcc, 0x80000001, 0x0, 0x2, r6}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x874, r5, &(0x7f0000000800)="1ee8b1a9c851deae798a391c195720bb184eefbd1a2adcf9987cdc50c4591d55b68ee6bb7cc9b418bd3d50e1a0e9b601233047be4e2505e886c1c65f5772397d9c3ea061d0ac2f4978356eff4e7bf8d1f6354a16df75cbd544a58678fd43c31e858fbb8339b8c9e3baaa5ca18b11bdbe93b0d191d861a69d7c30ab58949828b904fddbdf053f10c720215856c61012dd6ccf25bea55f8e05a463", 0x9a, 0x0, 0x0, 0x2, r6}]) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0xfea8, 0xa) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, &(0x7f0000000180)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, 0x0) mlock(&(0x7f00009c6000/0x1000)=nil, 0x1000) 687.319032ms ago: executing program 9 (id=1921): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) (async) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) (async, rerun: 64) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000000c0)={0x5, 0x8}) (rerun: 64) 592.493641ms ago: executing program 9 (id=1922): mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x18404, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x400000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="5ce900008080", 0x0, 0xfffffff7, 0x5dbcc8c695e5f418, 0x3, 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0'}, 0xb) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 222.296735ms ago: executing program 9 (id=1923): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000001b00)={0x7, 0x9, 0x6, 0x2, 0x7, 0x1b2e34d5}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000180)={0x0, 0x5}) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r5, 0x7dfff000) 0s ago: executing program 9 (id=1924): fadvise64(0xffffffffffffffff, 0x92, 0x5, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @local}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @local}}}, 0x118) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8010, 0xffffffffffffffff, 0xa471a000) kernel console output (not intermixed with test programs): 00000 R11: 0000000000000246 R12: 0000000000000001 [ 302.409307][T10452] R13: 0000000000000000 R14: 00007fa311bb5fa0 R15: 00007fffe681ee28 [ 302.409332][T10452] [ 302.801734][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 303.134575][T10473] netlink: 'syz.3.1249': attribute type 5 has an invalid length. [ 303.189471][ T5169] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 303.674514][T10489] tipc: Enabling of bearer rejected, already enabled [ 303.773493][T10491] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 303.782232][T10491] /dev/rnullb0: Can't open blockdev [ 304.073328][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.125160][T10496] tmpfs: Bad value for 'mpol' [ 304.399779][T10502] /dev/rnullb0: Can't open blockdev [ 304.407703][T10503] /dev/rnullb0: Can't open blockdev [ 304.546029][T10505] FAULT_INJECTION: forcing a failure. [ 304.546029][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 304.559202][T10505] CPU: 1 UID: 0 PID: 10505 Comm: syz.2.1262 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 304.559233][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.559245][T10505] Call Trace: [ 304.559254][T10505] [ 304.559263][T10505] dump_stack_lvl+0x189/0x250 [ 304.559297][T10505] ? __pfx____ratelimit+0x10/0x10 [ 304.559326][T10505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.559353][T10505] ? __pfx__printk+0x10/0x10 [ 304.559384][T10505] ? __kernel_text_address+0xd/0x40 [ 304.559404][T10505] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.559432][T10505] ? arch_stack_walk+0xfc/0x150 [ 304.559463][T10505] should_fail_ex+0x414/0x560 [ 304.559493][T10505] should_failslab+0xa8/0x100 [ 304.559516][T10505] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 304.559547][T10505] ? __alloc_skb+0x112/0x2d0 [ 304.559573][T10505] __alloc_skb+0x112/0x2d0 [ 304.559598][T10505] __pskb_copy_fclone+0xa8/0xfb0 [ 304.559640][T10505] tipc_msg_reassemble+0x10b/0x3b0 [ 304.559680][T10505] tipc_mcast_xmit+0x1f0/0x1850 [ 304.559722][T10505] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 304.559753][T10505] ? _copy_from_iter+0x308/0x16f0 [ 304.559787][T10505] ? rcu_is_watching+0x15/0xb0 [ 304.559813][T10505] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 304.559844][T10505] ? __pfx__copy_from_iter+0x10/0x10 [ 304.559876][T10505] ? __build_skb_around+0x257/0x3e0 [ 304.559900][T10505] ? tipc_msg_build+0x400/0xcf0 [ 304.559945][T10505] ? net_generic+0x1e/0x240 [ 304.559982][T10505] ? net_generic+0x1e/0x240 [ 304.560011][T10505] ? net_generic+0x1e/0x240 [ 304.560038][T10505] ? tipc_group_bc_cong+0x15f/0x210 [ 304.560072][T10505] tipc_send_group_bcast+0x79e/0xa70 [ 304.560126][T10505] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 304.560170][T10505] ? __pfx_woken_wake_function+0x10/0x10 [ 304.560204][T10505] ? process_measurement+0x72d/0x1a40 [ 304.560244][T10505] __tipc_sendmsg+0x2d7/0x2960 [ 304.560294][T10505] ? __pfx___tipc_sendmsg+0x10/0x10 [ 304.560318][T10505] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 304.560340][T10505] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 304.560363][T10505] ? aa_label_sk_perm+0x4cd/0x630 [ 304.560397][T10505] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 304.560451][T10505] ? __lock_acquire+0xab9/0xd20 [ 304.560488][T10505] ? __local_bh_enable_ip+0x12d/0x1c0 [ 304.560511][T10505] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.560542][T10505] ? __local_bh_enable_ip+0x12d/0x1c0 [ 304.560564][T10505] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 304.560599][T10505] tipc_sendmsg+0x55/0x70 [ 304.560627][T10505] ? __pfx_tipc_sendmsg+0x10/0x10 [ 304.560655][T10505] __sock_sendmsg+0x21c/0x270 [ 304.560688][T10505] ____sys_sendmsg+0x505/0x830 [ 304.560718][T10505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.560752][T10505] ? import_iovec+0x74/0xa0 [ 304.560776][T10505] ___sys_sendmsg+0x21f/0x2a0 [ 304.560802][T10505] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.560868][T10505] ? __fget_files+0x2a/0x420 [ 304.560892][T10505] ? __fget_files+0x3a0/0x420 [ 304.560930][T10505] __x64_sys_sendmsg+0x19b/0x260 [ 304.560956][T10505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.560991][T10505] ? __pfx_ksys_write+0x10/0x10 [ 304.561009][T10505] ? rcu_is_watching+0x15/0xb0 [ 304.561038][T10505] ? do_syscall_64+0xbe/0x3b0 [ 304.561090][T10505] do_syscall_64+0xfa/0x3b0 [ 304.561107][T10505] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.561136][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.561156][T10505] ? clear_bhb_loop+0x60/0xb0 [ 304.561181][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.561201][T10505] RIP: 0033:0x7f144158eb69 [ 304.561220][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.561238][T10505] RSP: 002b:00007f1442420038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.561260][T10505] RAX: ffffffffffffffda RBX: 00007f14417b5fa0 RCX: 00007f144158eb69 [ 304.561275][T10505] RDX: 0000000004088840 RSI: 0000200000000280 RDI: 0000000000000005 [ 304.561288][T10505] RBP: 00007f1442420090 R08: 0000000000000000 R09: 0000000000000000 [ 304.561301][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.561312][T10505] R13: 0000000000000000 R14: 00007f14417b5fa0 R15: 00007ffcee02d6b8 [ 304.561346][T10505] [ 305.249318][T10511] tipc: Enabling of bearer rejected, already enabled [ 305.258694][T10509] /dev/rnullb0: Can't open blockdev [ 305.436847][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.446779][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.621269][ T1115] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 305.782841][ T1115] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 305.795239][ T1115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.804380][ T1115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.812469][ T1115] usb 4-1: Product: syz [ 305.816633][ T1115] usb 4-1: Manufacturer: syz [ 305.821418][ T1115] usb 4-1: SerialNumber: syz [ 306.045876][ T1115] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 306.061842][ T1115] usb 4-1: USB disconnect, device number 46 [ 306.500684][ T5940] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 306.673223][ T5940] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 306.685258][ T5940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.694823][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.702900][ T5940] usb 4-1: Product: syz [ 306.707178][ T5940] usb 4-1: Manufacturer: syz [ 306.711865][ T5940] usb 4-1: SerialNumber: syz [ 306.924844][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.933785][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.943373][T10517] /dev/rnullb0: Can't open blockdev [ 306.959283][ T5940] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 306.976668][ T5940] usb 4-1: USB disconnect, device number 47 [ 307.431716][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1270'. [ 307.455466][T10523] /dev/rnullb0: Can't open blockdev [ 307.743795][ T1115] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 307.910346][ T1115] usb 4-1: Using ep0 maxpacket: 8 [ 307.932087][ T1115] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 307.943088][ T1115] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.956523][ T1115] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.967304][ T1115] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.977750][ T1115] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.992603][ T1115] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.002034][ T1115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.128008][T10534] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 308.217120][ T1115] usb 4-1: GET_CAPABILITIES returned 0 [ 308.225440][ T1115] usbtmc 4-1:16.0: can't read capabilities [ 308.305617][T10538] /dev/rnullb0: Can't open blockdev [ 308.504425][T10525] netlink: 'syz.3.1271': attribute type 3 has an invalid length. [ 308.524867][T10525] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 308.534420][T10525] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1271'. [ 308.572598][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.608640][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.625304][T10525] netlink: 'syz.3.1271': attribute type 2 has an invalid length. [ 309.185470][T10552] /dev/rnullb0: Can't open blockdev [ 309.235819][T10554] /dev/rnullb0: Can't open blockdev [ 309.933219][T10566] openvswitch: netlink: Unknown key attributes 2 [ 310.470494][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 310.521782][T10571] /dev/rnullb0: Can't open blockdev [ 310.652644][ T5940] usb 4-1: USB disconnect, device number 48 [ 310.735565][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.761250][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.862495][T10584] /dev/rnullb0: Can't open blockdev [ 310.909539][ T5169] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 311.380548][ T1115] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 311.454835][T10602] /dev/rnullb0: Can't open blockdev [ 311.551457][ T1115] usb 4-1: Using ep0 maxpacket: 32 [ 311.568331][T10604] kvm: user requested TSC rate below hardware speed [ 311.572057][ T1115] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 311.586660][T10604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 311.592911][ T1115] usb 4-1: config 0 has no interface number 0 [ 311.633712][ T1115] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 311.653269][ T1115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.675143][ T1115] usb 4-1: Product: syz [ 311.679388][ T1115] usb 4-1: Manufacturer: syz [ 311.684752][ T1115] usb 4-1: SerialNumber: syz [ 311.719948][ T1115] usb 4-1: config 0 descriptor?? [ 311.733010][ T1115] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 311.847727][ T5169] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 311.939574][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.958384][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.977348][ T1115] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 311.994089][ T1115] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 312.212959][T10621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.228692][T10621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.348122][T10626] /dev/rnullb0: Can't open blockdev [ 312.395946][T10596] /dev/rnullb0: Can't open blockdev [ 312.411322][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 312.420733][ T5940] usb 4-1: USB disconnect, device number 49 [ 312.443238][ T5940] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 312.480540][ T5940] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 312.504517][ T5940] quatech2 4-1:0.51: device disconnected [ 312.776210][T10640] /dev/rnullb0: Can't open blockdev [ 315.662131][T10692] /dev/rnullb0: Can't open blockdev [ 316.008904][T10702] /dev/rnullb0: Can't open blockdev [ 316.632612][T10723] batadv_slave_1: entered promiscuous mode [ 316.659171][T10723] batadv_slave_1: left promiscuous mode [ 316.739045][T10727] /dev/rnullb0: Can't open blockdev [ 316.758270][T10726] rose0: entered allmulticast mode [ 317.409256][ T1308] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.418634][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430081][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.830095][ T3000] Bluetooth: (null): Too short H5 packet [ 317.838346][ T3000] Bluetooth: (null): Invalid header checksum [ 317.954438][ T3000] Bluetooth: (null): Invalid header checksum [ 317.969782][ T3000] Bluetooth: (null): Invalid header checksum [ 318.046951][T10745] netlink: 'syz.2.1336': attribute type 11 has an invalid length. [ 318.055430][ T36] Bluetooth: (null): Invalid header checksum [ 318.070332][T10745] netlink: 'syz.2.1336': attribute type 5 has an invalid length. [ 318.110971][ T5940] usb 5-1: USB disconnect, device number 29 [ 318.172212][ T42] Bluetooth: (null): Invalid header checksum [ 318.271888][ T3000] Bluetooth: (null): Invalid header checksum [ 318.380654][ T3000] Bluetooth: (null): Invalid header checksum [ 318.492151][ T36] Bluetooth: (null): Invalid header checksum [ 318.567817][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.588000][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.596817][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.612745][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.627797][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.101013][T10759] input: syz0 as /devices/virtual/input/input24 [ 319.975352][ T5857] Bluetooth: hci4: link tx timeout [ 319.982904][ T5857] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 320.331316][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 320.335072][T10751] chnl_net:caif_netlink_parms(): no params data found [ 320.490173][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 320.500355][ T24] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 320.509697][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.517861][ T24] usb 4-1: Product: syz [ 320.526952][ T24] usb 4-1: Manufacturer: syz [ 320.531676][ T24] usb 4-1: SerialNumber: syz [ 320.544050][ T24] usb 4-1: config 0 descriptor?? [ 320.622706][T10780] /dev/rnullb0: Can't open blockdev [ 320.653391][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.662297][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.669550][T10751] bridge_slave_0: entered allmulticast mode [ 320.677399][ T5169] Bluetooth: hci0: command tx timeout [ 320.686601][T10751] bridge_slave_0: entered promiscuous mode [ 320.697712][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.705961][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.713714][T10751] bridge_slave_1: entered allmulticast mode [ 320.722092][T10751] bridge_slave_1: entered promiscuous mode [ 320.761323][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 320.810893][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.844373][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.953158][T10751] team0: Port device team_slave_0 added [ 320.969464][T10751] team0: Port device team_slave_1 added [ 321.143123][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.158940][T10792] /dev/rnullb0: Can't open blockdev [ 321.165077][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.169873][ T24] gspca_sunplus: reg_w_riv err -71 [ 321.228229][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.263668][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 321.283596][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.294250][ T24] usb 4-1: USB disconnect, device number 50 [ 321.313993][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.369525][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.731032][T10751] hsr_slave_0: entered promiscuous mode [ 321.754135][T10751] hsr_slave_1: entered promiscuous mode [ 322.020457][ T5169] Bluetooth: hci4: command 0x0406 tx timeout [ 322.180490][ T984] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 322.340552][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 322.384057][ T984] usb 4-1: config 15 has an invalid interface number: 2 but max is 0 [ 322.421036][ T984] usb 4-1: config 15 has no interface number 0 [ 322.454881][ T984] usb 4-1: config 15 interface 2 has no altsetting 0 [ 322.493480][ T984] usb 4-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=83.e9 [ 322.550398][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.593308][ T984] usb 4-1: Product: syz [ 322.603741][ T984] usb 4-1: Manufacturer: syz [ 322.628874][ T984] usb 4-1: SerialNumber: syz [ 322.741305][ T5857] Bluetooth: hci0: command tx timeout [ 322.867272][T10805] /dev/rnullb0: Can't open blockdev [ 322.989673][ T984] uvcvideo 4-1:15.2: probe with driver uvcvideo failed with error -22 [ 323.097059][ T984] usb 4-1: USB disconnect, device number 51 [ 323.193107][T10751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.551852][T10751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.644642][T10751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.759005][T10751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.636976][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.766045][T10751] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.806804][T10835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.819204][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.820865][ T5857] Bluetooth: hci0: command tx timeout [ 324.826411][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.914172][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.921521][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.057090][T10842] /dev/rnullb0: Can't open blockdev [ 325.069032][T10845] /dev/rnullb0: Can't open blockdev [ 325.150880][ T1115] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 325.265760][T10848] /dev/rnullb0: Can't open blockdev [ 325.360276][ T1115] usb 4-1: Using ep0 maxpacket: 8 [ 325.382100][ T1115] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.420867][ T1115] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 325.461423][ T1115] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.484890][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.485365][ T1115] usb 4-1: config 1 interface 0 has no altsetting 0 [ 325.497478][T10858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1366'. [ 325.526150][ T1115] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 325.527764][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.537089][ T1115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.583275][ T1115] usb 4-1: Product: syz [ 325.587496][ T1115] usb 4-1: Manufacturer: syz [ 325.604368][ T1115] usb 4-1: SerialNumber: syz [ 325.665663][T10751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.730215][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.753661][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.825456][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.839947][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.878973][ T1115] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 325.903808][ T1115] usb 4-1: USB disconnect, device number 52 [ 326.027656][T10751] veth0_vlan: entered promiscuous mode [ 326.042884][T10751] veth1_vlan: entered promiscuous mode [ 326.077908][T10751] veth0_macvtap: entered promiscuous mode [ 326.088119][T10751] veth1_macvtap: entered promiscuous mode [ 326.116264][T10751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.134391][T10751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.150760][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.159645][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.177837][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.191608][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.277890][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.288959][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.349642][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.375205][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.499798][T10874] /dev/rnullb0: Can't open blockdev [ 326.782395][T10887] syzkaller1: entered promiscuous mode [ 326.788115][T10887] syzkaller1: entered allmulticast mode [ 326.901086][ T5857] Bluetooth: hci0: command tx timeout [ 327.019718][T10893] /dev/rnullb0: Can't open blockdev [ 327.032231][T10893] /dev/rnullb0: Can't open blockdev [ 327.116093][T10901] /dev/rnullb0: Can't open blockdev [ 327.207764][T10904] /dev/rnullb0: Can't open blockdev [ 327.820249][ T1115] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 327.970361][ T1115] usb 7-1: device descriptor read/64, error -71 [ 327.993806][T10915] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1383'. [ 328.213318][ T1115] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 328.234314][T10917] tmpfs: Unknown parameter 'i£' [ 328.361426][ T1115] usb 7-1: device descriptor read/64, error -71 [ 328.473516][ T1115] usb usb7-port1: attempt power cycle [ 328.488341][T10924] /dev/rnullb0: Can't open blockdev [ 328.832540][ T1115] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 328.891835][ T1115] usb 7-1: device descriptor read/8, error -71 [ 328.954074][T10934] /dev/rnullb0: Can't open blockdev [ 329.138749][ T1115] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 329.185679][ T1115] usb 7-1: device descriptor read/8, error -71 [ 329.188404][T10939] /dev/rnullb0: Can't open blockdev [ 329.301181][ T1115] usb usb7-port1: unable to enumerate USB device [ 329.375614][T10943] /dev/rnullb0: Can't open blockdev [ 329.677255][T10955] batadv_slave_1: entered promiscuous mode [ 329.755092][T10954] /dev/rnullb0: Can't open blockdev [ 329.795233][T10957] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1398'. [ 329.810283][T10951] batadv_slave_1: left promiscuous mode [ 329.818140][T10957] tmpfs: Bad value for 'huge' [ 330.242047][T10973] /dev/rnullb0: Can't open blockdev [ 330.358518][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 330.442769][T10978] /dev/rnullb0: Can't open blockdev [ 330.602491][T10983] /dev/rnullb0: Can't open blockdev [ 330.768880][T10988] loop6: detected capacity change from 0 to 524287999 [ 330.830983][T10988] buffer_io_error: 32 callbacks suppressed [ 330.831002][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 330.912212][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 330.970262][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 330.990354][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 330.998368][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.025273][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.034396][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.040295][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.070272][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.088592][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.110203][T10988] ldm_validate_partition_table(): Disk read failed. [ 331.125158][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.160268][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.180459][T10988] Dev loop6: unable to read RDB block 0 [ 331.186623][T10988] loop6: unable to read partition table [ 331.210481][T10988] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 331.596304][T11004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.678585][ T3000] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 331.748988][T11003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.824308][ T3000] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 332.545149][T11016] /dev/rnullb0: Can't open blockdev [ 333.419404][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.471038][T11031] /dev/rnullb0: Can't open blockdev [ 333.490806][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.512987][T11031] /dev/rnullb0: Can't open blockdev [ 333.520843][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.564293][T11031] /dev/rnullb0: Can't open blockdev [ 333.570623][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.577940][T11031] /dev/rnullb0: Can't open blockdev [ 333.596399][ T5857] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 333.621153][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.661733][T11031] /dev/rnullb0: Can't open blockdev [ 333.697408][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.722429][T11031] /dev/rnullb0: Can't open blockdev [ 333.760421][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.771718][T11031] /dev/rnullb0: Can't open blockdev [ 333.779315][T11037] Invalid source name [ 333.794666][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.817764][T11031] /dev/rnullb0: Can't open blockdev [ 333.841960][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.865356][T11031] /dev/rnullb0: Can't open blockdev [ 333.896277][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.918356][T11031] /dev/rnullb0: Can't open blockdev [ 333.930321][ T984] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 333.957443][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.986120][T11031] /dev/rnullb0: Can't open blockdev [ 334.008406][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.027568][T11031] /dev/rnullb0: Can't open blockdev [ 334.047792][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.079618][T11031] /dev/rnullb0: Can't open blockdev [ 334.095912][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.117297][T11031] /dev/rnullb0: Can't open blockdev [ 334.118042][ T984] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.124633][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.142682][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.155103][T11031] /dev/rnullb0: Can't open blockdev [ 334.160329][ T984] usb 4-1: Product: syz [ 334.169258][ T984] usb 4-1: Manufacturer: syz [ 334.171000][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.179873][ T984] usb 4-1: SerialNumber: syz [ 334.200957][ T984] usb 4-1: config 0 descriptor?? [ 334.208568][T11031] /dev/rnullb0: Can't open blockdev [ 334.216677][T11031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.228064][T11031] /dev/rnullb0: Can't open blockdev [ 334.441554][ T984] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.830391][ T5884] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 334.985310][ T5884] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.995599][ T5884] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.011194][ T5884] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.024110][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.033065][ T5884] usb 7-1: Product: syz [ 335.037262][ T5884] usb 7-1: Manufacturer: syz [ 335.043901][ T5884] usb 7-1: SerialNumber: syz [ 335.300991][ T984] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 335.327887][ T984] usb 4-1: USB disconnect, device number 53 [ 336.028846][ T5884] cdc_ncm 7-1:1.0: bind() failure [ 336.058303][ T5884] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 336.078903][ T5884] usb 7-1: USB disconnect, device number 6 [ 336.606867][ T5857] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 336.944464][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.968073][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.985175][ T5884] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 337.151617][ T5884] usb 7-1: device descriptor read/64, error -71 [ 337.345732][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 337.358613][T11112] /dev/rnullb0: Can't open blockdev [ 337.400157][ T5884] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 337.441820][T11115] syz_tun: entered allmulticast mode [ 337.499190][T11115] binder: 11113:11115 ioctl 400c620e 2000000014c0 returned -22 [ 337.540440][ T5884] usb 7-1: device descriptor read/64, error -71 [ 337.666287][ T5884] usb usb7-port1: attempt power cycle [ 337.719174][T11123] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1449'. [ 337.739402][T11123] ucma_write: process 1013 (syz.3.1449) changed security contexts after opening file descriptor, this is not allowed. [ 337.817530][T11123] /dev/rnullb0: Can't open blockdev [ 338.033989][ T5884] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 338.073736][ T5884] usb 7-1: device descriptor read/8, error -71 [ 338.330198][ T5884] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 338.358768][ T5884] usb 7-1: device descriptor read/8, error -71 [ 338.480535][ T5884] usb usb7-port1: unable to enumerate USB device [ 340.130667][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.142666][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.153520][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.163632][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.244796][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.283138][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.319532][T11132] /dev/rnullb0: Can't open blockdev [ 340.330418][T11133] /dev/rnullb0: Can't open blockdev [ 341.363437][T11157] tipc: Enabled bearer , priority 10 [ 341.734628][T11157] tipc: Resetting bearer [ 341.984116][ T1015] tipc: Resetting bearer [ 342.040384][T11156] tipc: Resetting bearer [ 343.574664][T11169] /dev/rnullb0: Can't open blockdev [ 344.288897][T11156] tipc: Disabling bearer [ 344.298195][T11165] tipc: Enabling of bearer rejected, already enabled [ 344.306710][T11173] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1465'. [ 344.549411][T11182] 9pnet_fd: Insufficient options for proto=fd [ 344.579209][T11182] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1466'. [ 344.715161][T11186] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 344.753472][T11186] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1468'. [ 344.778957][T11188] /dev/rnullb0: Can't open blockdev [ 344.795053][T11190] /dev/rnullb0: Can't open blockdev [ 345.156801][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.191254][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.243754][T11201] tipc: Enabling of bearer rejected, already enabled [ 345.248489][T11202] /dev/rnullb0: Can't open blockdev [ 345.675325][T11215] /dev/rnullb0: Can't open blockdev [ 346.813868][T11226] netlink: 'syz.6.1484': attribute type 1 has an invalid length. [ 346.853345][T11226] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.1484'. [ 346.870370][T11230] tipc: Enabling of bearer rejected, already enabled [ 347.301981][ T5940] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 347.450367][ T5940] usb 4-1: device descriptor read/64, error -71 [ 347.701368][ T5940] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 347.855489][ T5940] usb 4-1: device descriptor read/64, error -71 [ 347.980712][ T5940] usb usb4-port1: attempt power cycle [ 348.340530][ T5940] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 348.357775][T11244] /dev/rnullb0: Can't open blockdev [ 348.367076][T11245] /dev/rnullb0: Can't open blockdev [ 348.375310][ T5940] usb 4-1: device descriptor read/8, error -71 [ 348.620672][ T5940] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 348.664962][ T5940] usb 4-1: device descriptor read/8, error -71 [ 348.782891][ T5940] usb usb4-port1: unable to enumerate USB device [ 350.313910][T11265] ntfs3: Unknown parameter 'discardº:–†[çæ$1dø ' [ 350.828865][T11283] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 350.836190][T11283] /dev/rnullb0: Can't open blockdev [ 351.088217][T11293] /dev/rnullb0: Can't open blockdev [ 351.264250][T11297] /dev/rnullb0: Can't open blockdev [ 351.394143][T11305] /dev/rnullb0: Can't open blockdev [ 351.585168][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 351.595076][ T5857] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 351.690247][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 351.832417][ T24] usb 4-1: device descriptor read/64, error -71 [ 351.952620][T11316] tipc: Enabling of bearer rejected, already enabled [ 352.101842][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 352.240174][ T24] usb 4-1: device descriptor read/64, error -71 [ 352.350811][ T24] usb usb4-port1: attempt power cycle [ 352.690127][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 352.710853][ T24] usb 4-1: device descriptor read/8, error -71 [ 352.952997][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 352.980945][ T24] usb 4-1: device descriptor read/8, error -71 [ 353.090976][ T24] usb usb4-port1: unable to enumerate USB device [ 354.578781][T11326] ./file0: Can't lookup blockdev [ 355.059413][T11328] /dev/rnullb0: Can't open blockdev [ 355.088338][T11328] syzkaller1: entered promiscuous mode [ 355.093990][T11328] syzkaller1: entered allmulticast mode [ 355.119442][T11328] cgroup: fork rejected by pids controller in /syz5 [ 355.561426][ T1342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.687138][ T1342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.775928][ T1342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.862683][ T1342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.993987][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.007271][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.022521][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.033559][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.043735][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.111943][ T1342] bridge_slave_1: left allmulticast mode [ 356.122143][ T1342] bridge_slave_1: left promiscuous mode [ 356.128015][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.138176][ T1342] bridge_slave_0: left allmulticast mode [ 356.144373][ T1342] bridge_slave_0: left promiscuous mode [ 356.150395][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.604869][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.616189][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.628683][ T1342] bond0 (unregistering): Released all slaves [ 356.647057][T11339] tipc: Enabling of bearer rejected, already enabled [ 356.763378][ T1342] tipc: Disabling bearer [ 356.786841][ T1342] tipc: Left network mode [ 357.265937][ T1342] hsr_slave_0: left promiscuous mode [ 357.297965][ T1342] hsr_slave_1: left promiscuous mode [ 357.349440][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.384930][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.411609][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.419137][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.478637][ T1342] veth1_macvtap: left promiscuous mode [ 357.486383][ T1342] veth0_macvtap: left promiscuous mode [ 357.533695][ T1342] veth1_vlan: left promiscuous mode [ 357.539112][ T1342] veth0_vlan: left promiscuous mode [ 357.639241][T11367] /dev/rnullb0: Can't open blockdev [ 358.103545][ T5169] Bluetooth: hci4: command tx timeout [ 358.287947][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 358.335926][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 358.355267][ T5918] Plextor PX-TV402U (unknown tuner): unable to load firmware from file "go7007/go7007fw.bin" [ 358.367726][ T5918] go7007 6-1:61.161: probe with driver go7007 failed with error -12 [ 358.399757][ T5918] go7007 6-1:61.159: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 358.414531][ T5918] go7007 6-1:61.159: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 359.034640][T11334] chnl_net:caif_netlink_parms(): no params data found [ 359.117512][T11381] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 359.369665][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.389932][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.397666][T11334] bridge_slave_0: entered allmulticast mode [ 359.409445][T11334] bridge_slave_0: entered promiscuous mode [ 359.431263][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.438598][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.453232][T11334] bridge_slave_1: entered allmulticast mode [ 359.453806][T11391] fuse: Unknown parameter 'e' [ 359.461649][T11334] bridge_slave_1: entered promiscuous mode [ 359.498408][T11391] /dev/rnullb0: Can't open blockdev [ 359.557042][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.584943][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.679003][T11334] team0: Port device team_slave_0 added [ 359.711494][T11334] team0: Port device team_slave_1 added [ 359.827585][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.850054][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.876073][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.900068][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.926677][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.950477][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.976589][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.995450][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.180625][ T5169] Bluetooth: hci4: command tx timeout [ 360.209442][T11334] hsr_slave_0: entered promiscuous mode [ 360.219250][T11334] hsr_slave_1: entered promiscuous mode [ 360.226810][T11334] debugfs: 'hsr0' already exists in 'hsr' [ 360.233025][T11334] Cannot create hsr debugfs directory [ 361.054135][T11426] Bluetooth: MGMT ver 1.23 [ 361.445520][T11334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 361.468910][T11334] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 361.483433][T11433] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 361.485548][T11334] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.501530][T11433] /dev/rnullb0: Can't open blockdev [ 361.514905][T11334] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.752286][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.807261][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.829295][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.836563][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.879080][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.886329][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.265625][ T5169] Bluetooth: hci4: command tx timeout [ 362.397860][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.470252][ T1115] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 362.640681][ T1115] usb 4-1: Using ep0 maxpacket: 32 [ 362.662915][ T1115] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 362.694279][ T1115] usb 4-1: config 0 has no interface number 0 [ 362.702123][ T1115] usb 4-1: too many endpoints for config 0 interface 51 altsetting 17: 253, using maximum allowed: 30 [ 362.731001][ T1115] usb 4-1: config 0 interface 51 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 362.764974][ T1115] usb 4-1: config 0 interface 51 has no altsetting 0 [ 362.794902][ T1115] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 362.825056][ T1115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.849879][ T1115] usb 4-1: Product: syz [ 362.862371][ T1115] usb 4-1: Manufacturer: syz [ 362.880908][ T1115] usb 4-1: SerialNumber: syz [ 362.897246][ T1115] usb 4-1: config 0 descriptor?? [ 362.917922][ T1115] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 363.126797][ T1115] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 363.145545][T11334] veth0_vlan: entered promiscuous mode [ 363.180434][ T1115] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 363.197491][T11334] veth1_vlan: entered promiscuous mode [ 363.314082][T11334] veth0_macvtap: entered promiscuous mode [ 363.334785][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 11 [ 363.357515][T11334] veth1_macvtap: entered promiscuous mode [ 363.438082][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.476739][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.504055][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.528932][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.557713][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.570539][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 363.573304][ T892] usb 4-1: USB disconnect, device number 62 [ 363.608093][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.621807][ T892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 363.645480][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.658171][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.676013][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.686686][ T892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 363.701396][ T892] quatech2 4-1:0.51: device disconnected [ 363.709317][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.724941][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.945178][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.984375][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.039347][ T892] usb 3-1: USB disconnect, device number 21 [ 364.075500][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.093254][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.341449][ T5169] Bluetooth: hci4: command tx timeout [ 364.787402][T11485] chnl_net:caif_netlink_parms(): no params data found [ 364.799445][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.816749][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.826765][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.837959][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.846448][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.935134][ T44] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 365.123455][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 365.264277][ T44] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 365.308790][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.319654][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.336662][T11485] bridge_slave_0: entered allmulticast mode [ 365.347109][T11485] bridge_slave_0: entered promiscuous mode [ 365.385637][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.405654][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.416331][T11485] bridge_slave_1: entered allmulticast mode [ 365.424540][T11485] bridge_slave_1: entered promiscuous mode [ 365.460178][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 365.474174][ T44] usb usb4-port1: attempt power cycle [ 365.558497][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.617294][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.739430][T11485] team0: Port device team_slave_0 added [ 365.767989][T11485] team0: Port device team_slave_1 added [ 365.784325][ T5169] Bluetooth: hci5: command tx timeout [ 365.822582][ T44] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 365.850761][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 365.917400][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.934931][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.961004][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.979602][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.003865][ T44] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 366.042927][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 366.050355][ T44] usb usb4-port1: unable to enumerate USB device [ 366.064702][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.077632][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.113521][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.164061][T11504] chnl_net:caif_netlink_parms(): no params data found [ 366.249134][T11485] hsr_slave_0: entered promiscuous mode [ 366.257285][T11485] hsr_slave_1: entered promiscuous mode [ 366.272073][T11485] debugfs: 'hsr0' already exists in 'hsr' [ 366.277930][T11485] Cannot create hsr debugfs directory [ 366.381097][T11504] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.388415][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.397376][T11504] bridge_slave_0: entered allmulticast mode [ 366.406632][T11504] bridge_slave_0: entered promiscuous mode [ 366.436855][T11504] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.444356][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.454179][T11504] bridge_slave_1: entered allmulticast mode [ 366.462868][T11504] bridge_slave_1: entered promiscuous mode [ 366.517758][T11504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.539826][T11504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.601655][T11504] team0: Port device team_slave_0 added [ 366.624382][T11504] team0: Port device team_slave_1 added [ 366.677480][T11504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.685153][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.711426][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.717996][T11504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.733735][T11504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.741337][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.768985][T11504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.853140][T11504] hsr_slave_0: entered promiscuous mode [ 366.863072][T11504] hsr_slave_1: entered promiscuous mode [ 366.869314][T11504] debugfs: 'hsr0' already exists in 'hsr' [ 366.875222][T11504] Cannot create hsr debugfs directory [ 366.901462][ T5169] Bluetooth: hci6: command tx timeout [ 366.988886][T11485] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.010859][T11485] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 367.026364][T11485] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 367.048492][T11485] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.282690][T11504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.298059][T11504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.317203][T11504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.328315][T11504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.367240][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.426275][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.453103][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.460326][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.489754][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.497075][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.608399][T11504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.669240][T11504] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.708389][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.715648][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.758603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.765987][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.861578][ T5169] Bluetooth: hci5: command tx timeout [ 368.045600][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.482522][T11504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.557659][T11576] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 368.583396][T11576] @: renamed from vlan0 (while UP) [ 368.807887][T11485] veth0_vlan: entered promiscuous mode [ 368.855228][T11485] veth1_vlan: entered promiscuous mode [ 368.944345][T11485] veth0_macvtap: entered promiscuous mode [ 368.972538][T11485] veth1_macvtap: entered promiscuous mode [ 368.986753][ T5169] Bluetooth: hci6: command tx timeout [ 369.035459][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.047941][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.089256][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.106457][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.133576][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.150238][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.359153][T11504] veth0_vlan: entered promiscuous mode [ 369.408316][T11504] veth1_vlan: entered promiscuous mode [ 369.438291][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.451979][T11509] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 369.473400][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.547831][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.567847][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.591706][T11504] veth0_macvtap: entered promiscuous mode [ 369.613363][T11504] veth1_macvtap: entered promiscuous mode [ 369.621661][T11509] usb 4-1: device descriptor read/64, error -71 [ 369.645838][T11504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.684780][T11504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.720494][ T1015] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.753694][ T1015] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.830430][ T1015] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.846851][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.880371][T11509] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 369.940262][ T5169] Bluetooth: hci5: command tx timeout [ 370.013309][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.030893][T11509] usb 4-1: device descriptor read/64, error -71 [ 370.051889][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.131216][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.150448][T11509] usb usb4-port1: attempt power cycle [ 370.156273][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.456471][T11597] /dev/rnullb0: Can't open blockdev [ 370.510501][T11509] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 370.540575][T11509] usb 4-1: device descriptor read/8, error -71 [ 370.700151][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 370.780106][T11509] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 370.803780][T11509] usb 4-1: device descriptor read/8, error -71 [ 370.873121][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 370.880985][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 370.889376][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.899478][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.911497][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.921810][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.921826][T11509] usb usb4-port1: unable to enumerate USB device [ 370.941430][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.950540][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.060255][ T5169] Bluetooth: hci6: command tx timeout [ 371.185952][ T10] usb 9-1: usb_control_msg returned -71 [ 371.199074][ T10] usbtmc 9-1:16.0: can't read capabilities [ 371.231671][ T10] usb 9-1: USB disconnect, device number 2 [ 371.916118][T11608] /dev/rnullb0: Can't open blockdev [ 372.020501][ T5169] Bluetooth: hci5: command tx timeout [ 372.223769][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.232723][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.276371][T11611] bridge0: entered promiscuous mode [ 372.287468][T11611] bridge0: entered allmulticast mode [ 372.327437][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'. [ 372.347122][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.354384][T11612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.363205][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.370429][T11612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.453108][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 373.010612][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 373.017144][T11618] /dev/rnullb0: Can't open blockdev [ 373.131901][T11620] /dev/rnullb0: Can't open blockdev [ 373.143042][ T5169] Bluetooth: hci6: command tx timeout [ 373.171436][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 373.193588][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.235411][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.247287][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 373.269643][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 373.284678][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.346556][ T10] usb 9-1: config 0 descriptor?? [ 373.764012][T11639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1569'. [ 373.777222][T11639] /dev/rnullb0: Can't open blockdev [ 373.786769][T11639] 9pnet_fd: p9_fd_create_unix (11639): problem connecting socket: ./cgroup: -111 [ 373.801259][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.825196][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.838411][T11634] kAFS: unparsable volume name [ 373.858196][ T10] logitech 0003:046D:C293.0007: unknown main item tag 0x0 [ 373.867401][ T10] logitech 0003:046D:C293.0007: unknown main item tag 0x0 [ 373.876717][ T10] logitech 0003:046D:C293.0007: unknown main item tag 0x0 [ 373.884531][ T10] logitech 0003:046D:C293.0007: unknown main item tag 0x0 [ 373.895954][ T10] logitech 0003:046D:C293.0007: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.8-1/input0 [ 373.930115][ T10] logitech 0003:046D:C293.0007: no inputs found [ 374.021792][ T30] kauditd_printk_skb: 1825 callbacks suppressed [ 374.021813][ T30] audit: type=1326 audit(1754134687.017:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137318eb69 code=0x7fc00000 [ 374.064038][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1561'. [ 374.084121][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1561'. [ 374.140063][ T5169] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 374.152446][ T10] usb 9-1: USB disconnect, device number 3 [ 374.448876][T11651] /dev/rnullb0: Can't open blockdev [ 374.866127][T11664] proc: Unknown parameter 'norecovery' [ 374.883081][T11662] input: syz1 as /devices/virtual/input/input25 [ 374.951270][T11661] /dev/rnullb0: Can't open blockdev [ 375.146703][T11674] /dev/rnullb0: Can't open blockdev [ 375.421042][ T30] audit: type=1804 audit(1754134688.407:1867): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1585" name="/newroot/428/bus/file1" dev="overlay" ino=2253 res=1 errno=0 [ 375.448756][ T30] audit: type=1800 audit(1754134688.437:1868): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1585" name="file1" dev="overlay" ino=2253 res=0 errno=0 [ 375.475290][ T984] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 375.501240][T11687] block nbd3: Device being setup by another task [ 375.616923][T11688] block nbd3: shutting down sockets [ 375.679488][ T984] usb 9-1: Using ep0 maxpacket: 8 [ 375.689205][ T984] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.706639][ T984] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.728105][ T984] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.794964][ T984] usb 9-1: config 0 interface 0 has no altsetting 0 [ 375.818792][ T984] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 375.838604][ T984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.847964][ T984] usb 9-1: Product: syz [ 375.857949][ T984] usb 9-1: Manufacturer: syz [ 375.881583][ T984] usb 9-1: SerialNumber: syz [ 375.890579][ T984] usb 9-1: config 0 descriptor?? [ 375.906747][ T984] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 376.085860][T11706] tipc: Started in network mode [ 376.091177][T11706] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 376.108379][T11706] tipc: Enabled bearer , priority 10 [ 376.146831][ T984] snd_usb_toneport 9-1:0.0: cannot get proper max packet size [ 376.161003][ T984] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 376.174877][ T984] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 376.339085][T11678] /dev/rnullb0: Can't open blockdev [ 376.372201][T11509] usb 9-1: USB disconnect, device number 4 [ 377.018658][T11717] FAULT_INJECTION: forcing a failure. [ 377.018658][T11717] name failslab, interval 1, probability 0, space 0, times 0 [ 377.040595][T11717] CPU: 0 UID: 0 PID: 11717 Comm: syz.8.1592 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 377.040624][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.040637][T11717] Call Trace: [ 377.040645][T11717] [ 377.040654][T11717] dump_stack_lvl+0x189/0x250 [ 377.040690][T11717] ? __pfx____ratelimit+0x10/0x10 [ 377.040730][T11717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.040757][T11717] ? __pfx__printk+0x10/0x10 [ 377.040792][T11717] ? __pfx___might_resched+0x10/0x10 [ 377.040815][T11717] ? fs_reclaim_acquire+0x7d/0x100 [ 377.040843][T11717] should_fail_ex+0x414/0x560 [ 377.040872][T11717] should_failslab+0xa8/0x100 [ 377.040896][T11717] __kmalloc_noprof+0xcb/0x4f0 [ 377.040924][T11717] ? kfree+0x4d/0x440 [ 377.040949][T11717] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 377.040980][T11717] tomoyo_realpath_from_path+0xe3/0x5d0 [ 377.041008][T11717] ? tomoyo_domain+0xd9/0x130 [ 377.041040][T11717] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 377.041061][T11717] tomoyo_path_number_perm+0x1e8/0x5a0 [ 377.041085][T11717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.041128][T11717] ? __lock_acquire+0xab9/0xd20 [ 377.041173][T11717] ? __fget_files+0x2a/0x420 [ 377.041201][T11717] ? __fget_files+0x2a/0x420 [ 377.041223][T11717] ? __fget_files+0x3a0/0x420 [ 377.041246][T11717] ? __fget_files+0x2a/0x420 [ 377.041274][T11717] security_file_ioctl+0xcb/0x2d0 [ 377.041308][T11717] __se_sys_ioctl+0x47/0x170 [ 377.041343][T11717] do_syscall_64+0xfa/0x3b0 [ 377.041360][T11717] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.041388][T11717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.041410][T11717] ? clear_bhb_loop+0x60/0xb0 [ 377.041434][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.041454][T11717] RIP: 0033:0x7f03c3d8eb69 [ 377.041470][T11717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.041488][T11717] RSP: 002b:00007f03c4ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.041511][T11717] RAX: ffffffffffffffda RBX: 00007f03c3fb5fa0 RCX: 00007f03c3d8eb69 [ 377.041526][T11717] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 377.041539][T11717] RBP: 00007f03c4ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 377.041552][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.041564][T11717] R13: 0000000000000000 R14: 00007f03c3fb5fa0 R15: 00007ffc3ce31ab8 [ 377.041597][T11717] [ 377.041607][T11717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.120437][T11509] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 377.317634][ T44] tipc: Node number set to 4269801488 [ 377.454491][T11509] usb 4-1: device descriptor read/64, error -71 [ 377.475585][T11722] /dev/rnullb0: Can't open blockdev [ 377.717115][T11509] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 377.830173][ T44] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 377.860396][T11509] usb 4-1: device descriptor read/64, error -71 [ 377.970769][T11509] usb usb4-port1: attempt power cycle [ 378.010092][ T44] usb 9-1: device descriptor read/64, error -71 [ 378.275270][T11729] warning: `syz.5.1597' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 378.280307][ T44] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 378.320303][T11509] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 378.383177][T11509] usb 4-1: device descriptor read/8, error -71 [ 378.451129][ T44] usb 9-1: device descriptor read/64, error -71 [ 378.571079][ T44] usb usb9-port1: attempt power cycle [ 378.630219][T11509] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 378.663452][T11509] usb 4-1: device descriptor read/8, error -71 [ 378.771205][T11509] usb usb4-port1: unable to enumerate USB device [ 378.824382][ T1308] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.841188][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847556][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.879878][T11737] netlink: 'syz.7.1600': attribute type 1 has an invalid length. [ 378.910343][ T44] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 378.935901][ T44] usb 9-1: device descriptor read/8, error -71 [ 379.180861][ T44] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 379.210919][ T44] usb 9-1: device descriptor read/8, error -71 [ 379.323093][ T44] usb usb9-port1: unable to enumerate USB device [ 379.887183][T11745] FAULT_INJECTION: forcing a failure. [ 379.887183][T11745] name failslab, interval 1, probability 0, space 0, times 0 [ 379.902622][T11745] CPU: 0 UID: 0 PID: 11745 Comm: syz.3.1602 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 379.902653][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.902665][T11745] Call Trace: [ 379.902674][T11745] [ 379.902684][T11745] dump_stack_lvl+0x189/0x250 [ 379.902717][T11745] ? __pfx____ratelimit+0x10/0x10 [ 379.902746][T11745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.902773][T11745] ? __pfx__printk+0x10/0x10 [ 379.902804][T11745] ? __pfx___might_resched+0x10/0x10 [ 379.902828][T11745] ? fs_reclaim_acquire+0x7d/0x100 [ 379.902855][T11745] should_fail_ex+0x414/0x560 [ 379.902884][T11745] should_failslab+0xa8/0x100 [ 379.902907][T11745] __kmalloc_noprof+0xcb/0x4f0 [ 379.902935][T11745] ? tomoyo_encode+0x28b/0x550 [ 379.902966][T11745] tomoyo_encode+0x28b/0x550 [ 379.902998][T11745] tomoyo_realpath_from_path+0x58d/0x5d0 [ 379.903037][T11745] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 379.903059][T11745] tomoyo_path_number_perm+0x1e8/0x5a0 [ 379.903083][T11745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.903126][T11745] ? __lock_acquire+0xab9/0xd20 [ 379.903171][T11745] ? __fget_files+0x2a/0x420 [ 379.903200][T11745] ? __fget_files+0x2a/0x420 [ 379.903223][T11745] ? __fget_files+0x3a0/0x420 [ 379.903246][T11745] ? __fget_files+0x2a/0x420 [ 379.903273][T11745] security_file_ioctl+0xcb/0x2d0 [ 379.903305][T11745] __se_sys_ioctl+0x47/0x170 [ 379.903336][T11745] do_syscall_64+0xfa/0x3b0 [ 379.903353][T11745] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.903380][T11745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.903398][T11745] ? clear_bhb_loop+0x60/0xb0 [ 379.903421][T11745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.903439][T11745] RIP: 0033:0x7f385fd8eb69 [ 379.903458][T11745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.903475][T11745] RSP: 002b:00007f3860c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.903506][T11745] RAX: ffffffffffffffda RBX: 00007f385ffb5fa0 RCX: 00007f385fd8eb69 [ 379.903521][T11745] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 379.903533][T11745] RBP: 00007f3860c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.903544][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.903556][T11745] R13: 0000000000000000 R14: 00007f385ffb5fa0 R15: 00007fff596adee8 [ 379.903588][T11745] [ 379.903610][T11745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.253531][T11749] /dev/rnullb0: Can't open blockdev [ 380.516857][T11759] /dev/rnullb0: Can't open blockdev [ 380.542400][T11759] /dev/rnullb0: Can't open blockdev [ 380.549139][T11759] /dev/rnullb0: Can't open blockdev [ 380.555437][T11759] /dev/rnullb0: Can't open blockdev [ 380.562067][T11759] /dev/rnullb0: Can't open blockdev [ 380.568406][T11759] /dev/rnullb0: Can't open blockdev [ 380.569849][T11762] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 380.575668][T11759] /dev/rnullb0: Can't open blockdev [ 380.592199][T11759] /dev/rnullb0: Can't open blockdev [ 380.598473][T11759] /dev/rnullb0: Can't open blockdev [ 380.617528][T11759] /dev/rnullb0: Can't open blockdev [ 380.624200][T11759] /dev/rnullb0: Can't open blockdev [ 380.635160][T11759] /dev/rnullb0: Can't open blockdev [ 380.686135][T11759] /dev/rnullb0: Can't open blockdev [ 380.695172][T11759] /dev/rnullb0: Can't open blockdev [ 380.701907][T11759] /dev/rnullb0: Can't open blockdev [ 380.709075][T11759] /dev/rnullb0: Can't open blockdev [ 380.716576][T11759] /dev/rnullb0: Can't open blockdev [ 380.723116][T11759] /dev/rnullb0: Can't open blockdev [ 380.729235][T11759] /dev/rnullb0: Can't open blockdev [ 380.736049][T11759] /dev/rnullb0: Can't open blockdev [ 380.747781][T11759] /dev/rnullb0: Can't open blockdev [ 380.754763][T11759] /dev/rnullb0: Can't open blockdev [ 380.762638][T11759] /dev/rnullb0: Can't open blockdev [ 380.769391][T11759] /dev/rnullb0: Can't open blockdev [ 380.793519][T11759] /dev/rnullb0: Can't open blockdev [ 380.804852][T11759] /dev/rnullb0: Can't open blockdev [ 380.817100][T11759] /dev/rnullb0: Can't open blockdev [ 380.824128][T11759] /dev/rnullb0: Can't open blockdev [ 380.830586][T11759] /dev/rnullb0: Can't open blockdev [ 380.836646][T11759] /dev/rnullb0: Can't open blockdev [ 380.846318][T11759] /dev/rnullb0: Can't open blockdev [ 380.853745][T11759] /dev/rnullb0: Can't open blockdev [ 380.865206][T11759] /dev/rnullb0: Can't open blockdev [ 380.979646][T11770] mkiss: ax0: crc mode is auto. [ 381.059843][T11772] FAULT_INJECTION: forcing a failure. [ 381.059843][T11772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.074657][T11772] CPU: 1 UID: 0 PID: 11772 Comm: syz.8.1614 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 381.074688][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.074700][T11772] Call Trace: [ 381.074708][T11772] [ 381.074718][T11772] dump_stack_lvl+0x189/0x250 [ 381.074750][T11772] ? __pfx____ratelimit+0x10/0x10 [ 381.074780][T11772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.074807][T11772] ? __pfx__printk+0x10/0x10 [ 381.074835][T11772] ? __might_fault+0xb0/0x130 [ 381.074878][T11772] should_fail_ex+0x414/0x560 [ 381.074907][T11772] _copy_from_user+0x2d/0xb0 [ 381.074928][T11772] vt_ioctl+0xa52/0x1f00 [ 381.074960][T11772] ? __pfx_vt_ioctl+0x10/0x10 [ 381.074998][T11772] ? __fget_files+0x2a/0x420 [ 381.075028][T11772] ? __fget_files+0x3a0/0x420 [ 381.075050][T11772] ? __fget_files+0x2a/0x420 [ 381.075077][T11772] tty_ioctl+0x929/0xde0 [ 381.075105][T11772] ? __pfx_tty_ioctl+0x10/0x10 [ 381.075132][T11772] __se_sys_ioctl+0xfc/0x170 [ 381.075166][T11772] do_syscall_64+0xfa/0x3b0 [ 381.075183][T11772] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.075210][T11772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.075230][T11772] ? clear_bhb_loop+0x60/0xb0 [ 381.075255][T11772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.075273][T11772] RIP: 0033:0x7f03c3d8eb69 [ 381.075293][T11772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.075311][T11772] RSP: 002b:00007f03c4ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.075334][T11772] RAX: ffffffffffffffda RBX: 00007f03c3fb5fa0 RCX: 00007f03c3d8eb69 [ 381.075349][T11772] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 381.075362][T11772] RBP: 00007f03c4ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 381.075375][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.075387][T11772] R13: 0000000000000000 R14: 00007f03c3fb5fa0 R15: 00007ffc3ce31ab8 [ 381.075420][T11772] [ 381.251330][ T5940] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 381.358159][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1615'. [ 381.387204][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1615'. [ 381.415553][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1615'. [ 381.423006][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 381.448861][ T5940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 381.469679][ T5940] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 381.489850][ T5940] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 381.510112][ T5940] usb 4-1: Product: syz [ 381.517627][ T5940] usb 4-1: Manufacturer: syz [ 381.525174][ T5940] usb 4-1: SerialNumber: syz [ 381.742912][ T5940] usb 4-1: Invalid connection information received from device [ 381.948154][ T984] usb 4-1: USB disconnect, device number 75 [ 382.636003][T11784] /dev/rnullb0: Can't open blockdev [ 383.404553][T11804] tipc: Started in network mode [ 383.409484][T11804] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 383.421429][T11804] tipc: Enabled bearer , priority 10 [ 383.617770][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.663318][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.851621][ T5940] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 383.885002][T11822] /dev/rnullb0: Can't open blockdev [ 384.020699][ T5940] usb 9-1: Using ep0 maxpacket: 32 [ 384.044705][ T5940] usb 9-1: unable to get BOS descriptor or descriptor too short [ 384.057013][T11825] cgroup: Name too long [ 384.063493][ T5940] usb 9-1: config 4 has an invalid interface number: 75 but max is 0 [ 384.090398][ T5940] usb 9-1: config 4 has no interface number 0 [ 384.090408][T11830] FAULT_INJECTION: forcing a failure. [ 384.090408][T11830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.096783][ T5940] usb 9-1: config 4 interface 75 has no altsetting 0 [ 384.120384][T11830] CPU: 1 UID: 0 PID: 11830 Comm: syz.3.1634 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 384.120414][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.120435][T11830] Call Trace: [ 384.120442][T11830] [ 384.120451][T11830] dump_stack_lvl+0x189/0x250 [ 384.120483][T11830] ? __pfx____ratelimit+0x10/0x10 [ 384.120512][T11830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.120539][T11830] ? __pfx__printk+0x10/0x10 [ 384.120580][T11830] should_fail_ex+0x414/0x560 [ 384.120609][T11830] _copy_to_user+0x31/0xb0 [ 384.120631][T11830] simple_read_from_buffer+0xe1/0x170 [ 384.120661][T11830] proc_fail_nth_read+0x1b3/0x220 [ 384.120693][T11830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.120725][T11830] ? rw_verify_area+0x2a6/0x4d0 [ 384.120744][T11830] ? __lock_acquire+0xab9/0xd20 [ 384.120762][T11830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.120791][T11830] vfs_read+0x200/0x980 [ 384.120811][T11830] ? fdget_pos+0x247/0x320 [ 384.120840][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 384.120873][T11830] ? __pfx_vfs_read+0x10/0x10 [ 384.120896][T11830] ? __fget_files+0x2a/0x420 [ 384.120926][T11830] ? __fget_files+0x3a0/0x420 [ 384.120947][T11830] ? __fget_files+0x2a/0x420 [ 384.120981][T11830] ksys_read+0x145/0x250 [ 384.121002][T11830] ? __fget_files+0x3a0/0x420 [ 384.121027][T11830] ? __pfx_ksys_read+0x10/0x10 [ 384.121055][T11830] ? do_syscall_64+0xbe/0x3b0 [ 384.121078][T11830] do_syscall_64+0xfa/0x3b0 [ 384.121095][T11830] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.121122][T11830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.121142][T11830] ? clear_bhb_loop+0x60/0xb0 [ 384.121168][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.121188][T11830] RIP: 0033:0x7f385fd8d57c [ 384.121207][T11830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 384.121224][T11830] RSP: 002b:00007f3860c9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.121246][T11830] RAX: ffffffffffffffda RBX: 00007f385ffb5fa0 RCX: 00007f385fd8d57c [ 384.121261][T11830] RDX: 000000000000000f RSI: 00007f3860c9e0a0 RDI: 0000000000000004 [ 384.121274][T11830] RBP: 00007f3860c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.121286][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.121298][T11830] R13: 0000000000000000 R14: 00007f385ffb5fa0 R15: 00007fff596adee8 [ 384.121332][T11830] [ 384.141314][ T5940] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=31.1c [ 384.388994][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.421137][ T5940] usb 9-1: Product: syz [ 384.425451][ T5940] usb 9-1: Manufacturer: syz [ 384.440427][ T5940] usb 9-1: SerialNumber: syz [ 384.442009][T11593] tipc: Node number set to 4269801488 [ 384.670571][ T5940] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 384.702418][ T5940] gspca_m5602: Failed to find a sensor [ 384.708075][ T5940] ALi m5602 9-1:4.75: ALi m5602 webcam failed [ 384.718249][T11836] /dev/rnullb0: Can't open blockdev [ 384.719570][ T5940] usb 9-1: USB disconnect, device number 9 [ 384.757196][T11839] /dev/rnullb0: Can't open blockdev [ 385.180148][ T5940] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 385.345066][ T5940] usb 4-1: config 0 has no interfaces? [ 385.355499][ T5940] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.376592][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.390096][ T5940] usb 4-1: Product: syz [ 385.395934][ T5940] usb 4-1: Manufacturer: syz [ 385.401933][ T5940] usb 4-1: SerialNumber: syz [ 385.420946][ T5940] usb 4-1: config 0 descriptor?? [ 385.506391][T11855] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 385.528862][T11855] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 385.658003][T11509] usb 4-1: USB disconnect, device number 76 [ 386.478545][ T30] audit: type=1326 audit(1754134699.467:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.536601][ T30] audit: type=1326 audit(1754134699.497:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.559242][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.566663][ T30] audit: type=1326 audit(1754134699.507:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.589216][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.596481][ T30] audit: type=1326 audit(1754134699.507:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.633228][ T30] audit: type=1326 audit(1754134699.507:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.656029][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.663052][ T30] audit: type=1326 audit(1754134699.507:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.686044][ T30] audit: type=1326 audit(1754134699.507:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.708859][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.715174][ T30] audit: type=1326 audit(1754134699.507:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.737740][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.748009][ T30] audit: type=1326 audit(1754134699.507:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.770506][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.776657][ T30] audit: type=1326 audit(1754134699.507:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.8.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3d8eb69 code=0x7fc00000 [ 386.935707][T11867] /dev/rnullb0: Can't open blockdev [ 387.502629][ T5940] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 387.660200][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 387.668794][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.684663][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 387.693971][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.702953][ T5940] usb 4-1: Product: syz [ 387.707534][ T5940] usb 4-1: Manufacturer: syz [ 387.712596][ T5940] usb 4-1: SerialNumber: syz [ 387.721119][ T5940] usb 4-1: config 0 descriptor?? [ 387.738131][ T5940] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 387.744830][ T5940] gspca_stv06xx: st6422 sensor detected [ 388.230854][ T5940] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 388.254524][ T5940] usb 4-1: USB disconnect, device number 77 [ 389.130555][T11899] program syz.7.1659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.310106][T11593] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 389.470661][T11593] usb 9-1: Using ep0 maxpacket: 32 [ 389.500937][T11593] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.521093][T11593] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.548375][T11593] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.575892][T11593] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.601827][T11593] usb 9-1: config 0 descriptor?? [ 389.634637][T11593] hub 9-1:0.0: USB hub found [ 389.815173][T11593] hub 9-1:0.0: 1 port detected [ 390.019319][T11895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.065295][T11895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.201959][T11895] /dev/rnullb0: Can't open blockdev [ 390.227150][T11918] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1662'. [ 390.259088][T11918] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1662'. [ 390.315740][T11918] netlink: 'syz.5.1662': attribute type 5 has an invalid length. [ 390.357090][T11918] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1662'. [ 390.914261][T11593] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 390.937303][T11593] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 390.984975][T11593] usbhid 9-1:0.0: can't add hid device: -32 [ 391.004731][T11593] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 391.316987][T11937] overlayfs: empty lowerdir [ 391.335721][T11937] /dev/rnullb0: Can't open blockdev [ 391.425283][ T892] usb 9-1: USB disconnect, device number 10 [ 391.700219][ T984] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 391.850399][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 391.866517][ T984] usb 4-1: config 2 has too many interfaces: 171, using maximum allowed: 32 [ 391.876298][ T984] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 391.888140][ T984] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 171 [ 391.897897][ T984] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 391.907399][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.497043][T11593] usb 4-1: USB disconnect, device number 78 [ 392.569088][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 392.569109][ T30] audit: type=1800 audit(1754134705.557:1936): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1675" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 392.986821][T11974] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1680'. [ 393.129414][ T5169] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 393.193540][T11982] sctp: [Deprecated]: syz.8.1683 (pid 11982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.193540][T11982] Use struct sctp_sack_info instead [ 393.212551][T11984] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 393.460543][ T5940] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 393.633845][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.655279][ T5940] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 393.715746][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.748627][ T5940] usb 4-1: config 0 descriptor?? [ 393.772942][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 393.990207][T11593] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 394.131514][T11593] usb 9-1: device descriptor read/64, error -71 [ 394.203998][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 394.220125][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 394.311972][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 394.319327][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 394.342267][ T5940] pwc: recv_control_msg error -32 req 04 val 1300 [ 394.349684][ T5940] pwc: recv_control_msg error -32 req 04 val 1400 [ 394.363606][ T5940] pwc: recv_control_msg error -32 req 02 val 2000 [ 394.370345][T11593] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 394.383502][ T5940] pwc: recv_control_msg error -32 req 02 val 2100 [ 394.391052][ T5940] pwc: recv_control_msg error -32 req 04 val 1500 [ 394.410337][ T5940] pwc: recv_control_msg error -32 req 02 val 2500 [ 394.430758][ T5940] pwc: recv_control_msg error -32 req 02 val 2400 [ 394.438112][ T5940] pwc: recv_control_msg error -32 req 02 val 2600 [ 394.452633][ T5940] pwc: recv_control_msg error -32 req 02 val 2900 [ 394.471672][ T5940] pwc: recv_control_msg error -32 req 02 val 2800 [ 394.540087][T11593] usb 9-1: device descriptor read/64, error -71 [ 394.660683][T11593] usb usb9-port1: attempt power cycle [ 395.023894][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 395.060207][T11593] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 395.083504][ T5940] pwc: Registered as video103. [ 395.104915][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 395.120109][T11593] usb 9-1: device descriptor read/8, error -71 [ 395.166362][ T5940] usb 4-1: USB disconnect, device number 79 [ 395.400323][T11593] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 395.439569][T11593] usb 9-1: device descriptor read/8, error -71 [ 395.463696][T12027] /dev/rnullb0: Can't open blockdev [ 395.560458][T11593] usb usb9-port1: unable to enumerate USB device [ 395.864716][T12035] /dev/rnullb0: Can't open blockdev [ 396.457193][T12043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 396.469568][T12042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 396.479188][T12043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 396.494070][T12043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 397.160302][T11593] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 397.325240][T11593] usb 9-1: Using ep0 maxpacket: 16 [ 397.341907][T11593] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 397.364102][T11593] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.400160][T11593] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 397.419263][T11593] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.449199][T11593] usb 9-1: config 0 descriptor?? [ 397.486065][T11593] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 398.154250][T12065] nvme_fabrics: missing parameter 'transport=%s' [ 398.168325][T12070] tipc: Started in network mode [ 398.176627][T12065] nvme_fabrics: missing parameter 'nqn=%s' [ 398.183260][T12070] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 398.235740][T12070] tipc: Enabled bearer , priority 10 [ 398.407489][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.431380][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.570426][ T892] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 398.770260][ T892] usb 4-1: Using ep0 maxpacket: 32 [ 398.787727][ T892] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 398.806072][ T892] usb 4-1: config 0 has no interface number 0 [ 398.829428][ T892] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 398.859442][ T892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.882184][ T892] usb 4-1: Product: syz [ 398.886445][ T892] usb 4-1: Manufacturer: syz [ 398.905054][ T892] usb 4-1: SerialNumber: syz [ 398.931747][ T892] usb 4-1: config 0 descriptor?? [ 398.947225][ T892] smsc95xx v2.0.0 [ 399.208314][ T892] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 399.229180][ T892] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 399.264326][ T892] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 399.292859][ T892] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 399.325962][ T892] usb 4-1: USB disconnect, device number 80 [ 399.350743][T11593] tipc: Node number set to 4269801488 [ 399.503239][T12096] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 399.503239][T12096] The task syz.3.1718 (12096) triggered the difference, watch for misbehavior. [ 400.093961][T12099] vxcan0: tx address claim with different name [ 400.285665][T11593] usb 9-1: USB disconnect, device number 15 [ 400.438432][T12101] tipc: Enabling of bearer rejected, already enabled [ 400.872607][ T5940] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 401.072133][ T5940] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 401.089726][ T5940] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 25863, setting to 1024 [ 401.103909][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 401.110924][ T5940] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 401.120650][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.134496][ T5940] usb 4-1: config 0 descriptor?? [ 401.148952][T12106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 401.240433][ T984] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 401.353098][T12103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.366135][T12103] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 401.400304][T12103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.413337][T12103] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 401.421757][ T984] usb 9-1: Invalid ep0 maxpacket: 9 [ 401.571657][ T984] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 401.631499][T12103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.646595][T12103] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 401.718214][T12103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.727655][T12103] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 401.752071][ T984] usb 9-1: Invalid ep0 maxpacket: 9 [ 401.771147][ T984] usb usb9-port1: attempt power cycle [ 401.847866][T12103] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.856050][ T5940] usb 4-1: string descriptor 0 read error: -22 [ 401.861121][T12103] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 401.894572][T12103] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 401.905788][T12103] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 401.987208][T12103] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 401.999544][T12103] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 402.136362][ T984] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 402.181182][ T984] usb 9-1: Invalid ep0 maxpacket: 9 [ 402.321440][ T984] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 402.382759][ T984] usb 9-1: Invalid ep0 maxpacket: 9 [ 402.393221][ T5940] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 402.411349][ T984] usb usb9-port1: unable to enumerate USB device [ 402.420765][ T5940] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 402.439918][ T5940] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 402.459221][ T5940] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 402.477809][ T5940] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 402.504586][ T5940] usb 4-1: USB disconnect, device number 81 [ 402.624222][T12149] comedi comedi0: pcmda12: I/O port conflict (0x4f27,16) [ 402.717206][ T30] audit: type=1326 audit(1754134716.706:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.7.1727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f137318eb69 code=0x0 [ 402.739095][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.470127][ T44] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 403.631552][ T44] usb 4-1: device descriptor read/64, error -71 [ 403.832175][T12185] /dev/rnullb0: Can't open blockdev [ 403.900244][ T44] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 404.040738][ T44] usb 4-1: device descriptor read/64, error -71 [ 404.079327][T12190] /dev/rnullb0: Can't open blockdev [ 404.174897][ T44] usb usb4-port1: attempt power cycle [ 404.424476][T12199] /dev/rnullb0: Can't open blockdev [ 404.531715][ T44] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 404.572442][ T44] usb 4-1: device descriptor read/8, error -71 [ 404.674108][T12206] /dev/sg0: Can't lookup blockdev [ 404.820823][ T44] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 404.891588][ T44] usb 4-1: device descriptor read/8, error -71 [ 405.010675][ T44] usb usb4-port1: unable to enumerate USB device [ 405.181548][T12223] syzkaller1: entered allmulticast mode [ 405.444553][T12233] /dev/rnullb0: Can't open blockdev [ 405.456472][T12233] netlink: 'syz.5.1743': attribute type 21 has an invalid length. [ 405.478361][T12233] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1743'. [ 406.172065][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 406.194625][T12257] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 406.210575][T12258] /dev/rnullb0: Can't open blockdev [ 406.219774][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 406.305156][T12263] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.313906][T12267] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.828609][T12273] vxcan0: tx address claim with different name [ 407.834144][T12316] fuse: Bad value for 'fd' [ 408.163765][T12322] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 408.336429][T12327] /dev/rnullb0: Can't open blockdev [ 408.346868][T12324] /dev/rnullb0: Can't open blockdev [ 408.602454][T12334] /dev/rnullb0: Can't open blockdev [ 409.958156][ T30] audit: type=1800 audit(1754134723.946:1938): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1777" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 410.456340][T12373] tipc: Enabling of bearer rejected, already enabled [ 410.532276][T12375] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 410.535467][T12376] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 410.539502][T12375] /dev/rnullb0: Can't open blockdev [ 410.583246][T12376] /dev/rnullb0: Can't open blockdev [ 411.757316][T12398] /dev/rnullb0: Can't open blockdev [ 411.785916][T12398] trusted_key: syz.3.1790 sent an empty control message without MSG_MORE. [ 411.861397][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 412.554930][T12406] tipc: Enabling of bearer rejected, already enabled [ 412.898739][T12413] /dev/rnullb0: Can't open blockdev [ 413.321568][T12418] /dev/rnullb0: Can't open blockdev [ 414.172968][T12435] /dev/rnullb0: Can't open blockdev [ 414.321467][T12439] tipc: Enabling of bearer rejected, already enabled [ 415.032213][ T44] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 415.233092][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 415.256343][ T44] usb 9-1: config 13 has an invalid interface number: 97 but max is 0 [ 415.272483][ T44] usb 9-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 415.290512][ T44] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 415.311121][ T44] usb 9-1: config 13 has no interface number 0 [ 415.330318][ T44] usb 9-1: config 13 interface 97 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 415.456487][ T44] usb 9-1: config 13 interface 97 has no altsetting 0 [ 415.486429][ T44] usb 9-1: New USB device found, idVendor=2001, idProduct=331c, bcdDevice=16.bd [ 415.505935][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.523762][ T44] usb 9-1: Product: syz [ 415.530484][ T44] usb 9-1: Manufacturer: syz [ 415.535123][ T44] usb 9-1: SerialNumber: syz [ 415.595043][T12460] /dev/rnullb0: Can't open blockdev [ 415.791207][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.817641][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.880236][T11509] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 415.921792][ T44] usb 9-1: USB disconnect, device number 20 [ 416.070380][T11509] usb 4-1: Using ep0 maxpacket: 8 [ 416.096380][T11509] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 416.129216][T11509] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 416.160301][T11509] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.213370][T11509] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.240074][T11509] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.262071][T11509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.310287][T12480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.336201][T12480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.350732][T12480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.358935][T12480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.370526][T12480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.388851][T12480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.500435][T11509] usb 4-1: GET_CAPABILITIES returned 0 [ 416.516218][T11509] usbtmc 4-1:16.0: can't read capabilities [ 416.935509][T11509] usb 4-1: USB disconnect, device number 86 [ 417.532125][ T10] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 417.670961][ T10] usb 9-1: device descriptor read/64, error -71 [ 417.800452][ T5940] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 417.913590][ T10] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 417.939134][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.978802][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 417.997801][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.009249][ T5940] usb 4-1: config 0 has no interfaces? [ 418.032724][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 418.057951][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.068776][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.079233][ T10] usb 9-1: device descriptor read/64, error -71 [ 418.093522][ T5940] usb 4-1: config 0 descriptor?? [ 418.181701][ T10] usb usb9-port1: attempt power cycle [ 418.205700][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.313357][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.361618][T11593] usb 4-1: USB disconnect, device number 87 [ 418.540133][ T10] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 418.582317][ T10] usb 9-1: device descriptor read/8, error -71 [ 418.602511][ T59] bridge_slave_1: left allmulticast mode [ 418.620643][ T59] bridge_slave_1: left promiscuous mode [ 418.628553][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.658141][ T59] bridge_slave_0: left allmulticast mode [ 418.670329][ T59] bridge_slave_0: left promiscuous mode [ 418.686414][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.833482][ T10] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 418.871054][ T10] usb 9-1: device descriptor read/8, error -71 [ 419.007511][ T10] usb usb9-port1: unable to enumerate USB device [ 419.221488][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.239252][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.249512][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.268624][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.282272][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.385380][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.395366][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.404477][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.414361][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.436612][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.903516][ T5918] Plextor PX-TV402U (unknown tuner): unable to load firmware from file "go7007/go7007fw.bin" [ 419.928162][ T5918] go7007 6-1:61.159: probe with driver go7007 failed with error -12 [ 419.979147][ T5918] go7007 6-1:61.127: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 419.999361][ T5918] go7007 6-1:61.127: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 420.129050][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.164572][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.170824][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'. [ 420.189688][ T59] bond0 (unregistering): Released all slaves [ 420.360401][ T59] tipc: Disabling bearer [ 420.383603][ T59] tipc: Left network mode [ 420.532388][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1830'. [ 421.477259][ T59] hsr_slave_0: left promiscuous mode [ 421.484424][ T59] hsr_slave_1: left promiscuous mode [ 421.499218][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.524558][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.541037][ T5169] Bluetooth: hci4: command tx timeout [ 421.563674][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.572252][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.643693][ T59] veth1_macvtap: left promiscuous mode [ 421.674229][ T59] veth0_macvtap: left promiscuous mode [ 421.689166][ T59] veth1_vlan: left promiscuous mode [ 421.708749][ T59] veth0_vlan: left promiscuous mode [ 422.757877][ T59] team0 (unregistering): Port device team_slave_1 removed [ 422.839444][ T59] team0 (unregistering): Port device team_slave_0 removed [ 423.622719][ T5169] Bluetooth: hci4: command tx timeout [ 423.779845][T12498] chnl_net:caif_netlink_parms(): no params data found [ 424.366067][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.400720][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.408520][T12498] bridge_slave_0: entered allmulticast mode [ 424.446799][T12498] bridge_slave_0: entered promiscuous mode [ 424.478580][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.510087][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.527765][T12498] bridge_slave_1: entered allmulticast mode [ 424.552078][T12498] bridge_slave_1: entered promiscuous mode [ 424.798172][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.838966][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.003773][T12498] team0: Port device team_slave_0 added [ 425.024791][T12498] team0: Port device team_slave_1 added [ 425.137165][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.169030][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.259857][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.309270][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.331546][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.357746][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.411149][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.598512][T12498] hsr_slave_0: entered promiscuous mode [ 425.624236][T12498] hsr_slave_1: entered promiscuous mode [ 425.661052][T12498] debugfs: 'hsr0' already exists in 'hsr' [ 425.670442][T12498] Cannot create hsr debugfs directory [ 425.700564][ T5169] Bluetooth: hci4: command tx timeout [ 426.973274][T12498] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.077343][T12498] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 427.113156][T12498] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 427.523931][T12498] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 427.780747][ T5169] Bluetooth: hci4: command tx timeout [ 427.907304][T12498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.990936][T12498] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.034421][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.041683][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.124276][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.131542][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.265953][T12622] /dev/rnullb0: Can't open blockdev [ 428.308398][T12621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.640448][ T984] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 428.804709][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 428.817802][ T984] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.837650][T12498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.848969][ T984] usb 4-1: config 0 has no interface number 0 [ 428.864550][ T984] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 428.904858][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.939919][ T984] usb 4-1: Product: syz [ 428.944297][ T984] usb 4-1: Manufacturer: syz [ 428.949024][ T984] usb 4-1: SerialNumber: syz [ 429.006260][ T984] usb 4-1: config 0 descriptor?? [ 429.040241][ T984] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 429.925786][T12498] veth0_vlan: entered promiscuous mode [ 430.017168][T12498] veth1_vlan: entered promiscuous mode [ 430.249694][T12498] veth0_macvtap: entered promiscuous mode [ 430.326519][T12498] veth1_macvtap: entered promiscuous mode [ 430.461133][T12498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.538824][T12498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.619111][ T1015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.643385][ T1015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.697497][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.710143][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.738310][ T984] gspca_spca1528: reg_w err -71 [ 430.753582][ T984] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 430.810840][ T984] usb 4-1: USB disconnect, device number 88 [ 430.947234][T12481] syz.7.1818 (12481) used greatest stack depth: 17800 bytes left [ 431.007260][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.034766][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.127903][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.137872][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.792543][T12672] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1854'. [ 432.647864][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1855'. [ 432.698133][T12687] overlayfs: unescaped trailing colons in lowerdir mount option. [ 433.049244][T12698] usb usb8: usbfs: process 12698 (syz.3.1859) did not claim interface 0 before use [ 433.921359][T12708] /dev/rnullb0: Can't open blockdev [ 434.390361][ T984] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 434.562619][ T984] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 434.583226][T12720] overlayfs: conflicting options: userxattr,redirect_dir=on [ 434.589356][ T984] usb 4-1: config 0 has no interface number 0 [ 434.618769][ T984] usb 4-1: too many endpoints for config 0 interface 97 altsetting 130: 126, using maximum allowed: 30 [ 434.640163][ T984] usb 4-1: config 0 interface 97 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 434.659496][ T984] usb 4-1: config 0 interface 97 has no altsetting 0 [ 434.680682][ T984] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 434.691141][T12723] overlayfs: failed to resolve './file0': -2 [ 434.713826][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.755005][ T984] usb 4-1: config 0 descriptor?? [ 434.980114][T12712] tipc: Enabling of bearer rejected, failed to enable media [ 434.998216][ T984] usb 4-1: string descriptor 0 read error: -71 [ 435.007749][ T984] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 435.047309][ T984] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 435.075851][ T984] usb 4-1: USB disconnect, device number 89 [ 435.103640][ T984] ftdi_sio 4-1:0.97: device disconnected [ 435.349780][T12739] /dev/rnullb0: Can't open blockdev [ 436.251607][T12760] /dev/rnullb0: Can't open blockdev [ 436.625545][T12768] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1875'. [ 436.640084][ T44] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 436.663115][T12768] /dev/rnullb0: Can't open blockdev [ 436.812803][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 437.686951][ T44] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 437.696810][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.711707][ T44] usb 4-1: Product: syz [ 437.716145][ T44] usb 4-1: Manufacturer: syz [ 437.721287][ T44] usb 4-1: SerialNumber: syz [ 437.745272][ T44] usb 4-1: config 0 descriptor?? [ 437.757188][ T44] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 437.795314][T12780] /dev/rnullb0: Can't open blockdev [ 438.610741][ T44] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 438.623516][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 438.655640][ T44] usb 4-1: USB disconnect, device number 90 [ 439.460583][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 439.630230][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 439.642225][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 439.657587][ T9] usb 4-1: config 4 has an invalid interface number: 3 but max is 0 [ 439.666094][ T9] usb 4-1: config 4 has no interface number 0 [ 439.672726][ T9] usb 4-1: config 4 interface 3 has no altsetting 0 [ 439.684154][ T9] usb 4-1: New USB device found, idVendor=19d2, idProduct=0017, bcdDevice=c2.49 [ 439.694372][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.702854][ T9] usb 4-1: Product: syz [ 439.707451][ T9] usb 4-1: Manufacturer: syz [ 439.712434][ T9] usb 4-1: SerialNumber: syz [ 439.935520][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.971098][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.009768][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.035870][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.074353][ T9] usb 4-1: USB disconnect, device number 91 [ 440.266700][ T1308] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.280767][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.289091][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.330172][ T5884] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 441.372966][T12843] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.1890'. [ 441.490702][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 441.504832][ T5884] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 441.519717][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.549437][ T5884] usb 4-1: config 0 descriptor?? [ 441.766326][ T5884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 441.792632][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 441.811077][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 441.818393][ T5884] usb 4-1: media controller created [ 441.865258][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.247751][T12856] ./cgroup: Can't lookup blockdev [ 443.305080][T12859] /dev/rnullb0: Can't open blockdev [ 443.484576][T12863] /dev/rnullb0: Can't open blockdev [ 443.942124][ T5884] az6027: usb out operation failed. (-110) [ 443.967411][ T5884] az6027: usb out operation failed. (-71) [ 443.984927][ T5884] stb0899_attach: Driver disabled by Kconfig [ 443.991715][ T5884] az6027: no front-end attached [ 443.991715][ T5884] [ 443.999569][ T5884] az6027: usb out operation failed. (-71) [ 444.009392][ T5884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 444.027545][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 444.059583][ T5884] dvb-usb: schedule remote query interval to 400 msecs. [ 444.097010][ T5884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 444.118964][ T5884] usb 4-1: USB disconnect, device number 92 [ 444.239095][ T5884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 444.568508][T12882] syz.7.1901: attempt to access beyond end of device [ 444.568508][T12882] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 444.589468][T12882] syz.7.1901: attempt to access beyond end of device [ 444.589468][T12882] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 444.605342][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 444.615807][T12882] syz.7.1901: attempt to access beyond end of device [ 444.615807][T12882] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 444.637855][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 444.648152][T12882] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 444.669083][T12882] UDF-fs: Scanning with blocksize 512 failed [ 444.688176][T12882] syz.7.1901: attempt to access beyond end of device [ 444.688176][T12882] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 444.706196][T12882] syz.7.1901: attempt to access beyond end of device [ 444.706196][T12882] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 444.739233][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 444.785983][T12882] syz.7.1901: attempt to access beyond end of device [ 444.785983][T12882] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 444.800444][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 444.811621][T12882] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 444.819284][T12882] UDF-fs: Scanning with blocksize 1024 failed [ 444.826704][T12882] syz.7.1901: attempt to access beyond end of device [ 444.826704][T12882] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 444.841540][T12882] syz.7.1901: attempt to access beyond end of device [ 444.841540][T12882] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 444.855155][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 444.890522][T12882] syz.7.1901: attempt to access beyond end of device [ 444.890522][T12882] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 444.923553][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 444.939999][T12882] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 444.947603][T12882] UDF-fs: Scanning with blocksize 2048 failed [ 445.020602][T12882] syz.7.1901: attempt to access beyond end of device [ 445.020602][T12882] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 445.097764][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 445.177862][T12882] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 445.218401][T12882] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 445.260610][T12882] UDF-fs: Scanning with blocksize 4096 failed [ 445.272629][T12882] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 445.960188][T12901] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 446.058558][T12906] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 446.419803][T12914] kvm: emulating exchange as write [ 446.435800][T12916] /dev/rnullb0: Can't open blockdev [ 446.700110][ T5884] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 446.860914][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 446.872954][ T5884] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 446.873133][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.892902][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.903536][ T5884] usb 4-1: config 0 has no interface number 0 [ 446.909935][ T5884] usb 4-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 446.911297][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.927930][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.946385][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.995861][ T5884] usb 4-1: config 0 descriptor?? [ 447.025798][ T5884] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 447.035550][ T5884] usb 4-1: setting power ON [ 447.044790][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 447.192709][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 447.341342][ T5884] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 447.347801][T12927] chnl_net:caif_netlink_parms(): no params data found [ 447.415461][ T5884] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 447.440442][ T5884] dvb_usb_cxusb 4-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 447.464923][ T5884] usb 4-1: USB disconnect, device number 93 [ 447.570937][T12948] /dev/rnullb0: Can't open blockdev [ 447.630961][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.638400][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.646234][T12927] bridge_slave_0: entered allmulticast mode [ 447.655473][T12927] bridge_slave_0: entered promiscuous mode [ 447.676464][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.688739][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.716292][T12927] bridge_slave_1: entered allmulticast mode [ 447.732244][T12927] bridge_slave_1: entered promiscuous mode [ 447.764308][T12953] /dev/rnullb0: Can't open blockdev [ 447.865241][T12927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.883691][T12927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.955230][T12927] team0: Port device team_slave_0 added [ 447.965149][T12927] team0: Port device team_slave_1 added [ 448.038012][T12927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.048711][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.074752][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.089920][T12927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.116327][T12927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.134816][T12963] /dev/rnullb0: Can't open blockdev [ 448.136254][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.176377][T12927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.331313][T12927] hsr_slave_0: entered promiscuous mode [ 448.358647][T12927] hsr_slave_1: entered promiscuous mode [ 448.368892][T12927] debugfs: 'hsr0' already exists in 'hsr' [ 448.377948][T12927] Cannot create hsr debugfs directory [ 448.980227][ T5169] Bluetooth: hci7: command tx timeout [ 449.023139][ T44] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 449.200154][ T44] usb 10-1: Using ep0 maxpacket: 8 [ 449.220231][ T31] INFO: task syz.4.1245:10459 blocked for more than 143 seconds. [ 449.228040][ T31] Not tainted 6.16.0-next-20250731-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 449.244282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.259433][ T44] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 449.276179][ T44] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 449.285069][ T31] task:syz.4.1245 state:D stack:28328 pid:10459 tgid:10457 ppid:7221 task_flags:0x400040 flags:0x00004004 [ 449.297433][ T44] usb 10-1: Product: syz [ 449.329336][ T44] usb 10-1: Manufacturer: syz [ 449.334716][ T44] usb 10-1: SerialNumber: syz [ 449.340064][ T31] Call Trace: [ 449.343378][ T31] [ 449.366110][ T31] __schedule+0x1798/0x4cc0 [ 449.381971][ T44] usb 10-1: config 0 descriptor?? [ 449.387328][ T31] ? __lock_acquire+0xab9/0xd20 [ 449.406800][ T31] ? __lock_acquire+0xab9/0xd20 [ 449.420443][ T31] ? __pfx___schedule+0x10/0x10 [ 449.425394][ T31] ? schedule+0x91/0x360 [ 449.442355][ T44] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 449.460152][ T31] schedule+0x165/0x360 [ 449.464600][ T31] schedule_preempt_disabled+0x13/0x30 [ 449.510026][ T31] __mutex_lock+0x7e6/0x1360 [ 449.514738][ T31] ? __mutex_lock+0x5b6/0x1360 [ 449.519665][ T31] ? usbdev_open+0x16e/0x760 [ 449.580979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 449.586148][ T31] ? bus_find_device+0x273/0x2b0 [ 449.610041][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 449.615436][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 449.646609][ T31] ? usbdev_open+0xa7/0x760 [ 449.660600][ T31] usbdev_open+0x16e/0x760 [ 449.665158][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 449.692068][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 449.710076][ T31] chrdev_open+0x4c9/0x5e0 [ 449.714628][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.719643][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 449.740087][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.745141][ T31] do_dentry_open+0x953/0x13f0 [ 449.770089][ T31] vfs_open+0x3b/0x340 [ 449.774273][ T31] ? path_openat+0x2ecd/0x3830 [ 449.779190][ T31] path_openat+0x2ee5/0x3830 [ 449.789061][ T31] ? arch_stack_walk+0xfc/0x150 [ 449.800093][ T31] ? stack_depot_save_flags+0x40/0x860 [ 449.805647][ T31] ? __pfx_path_openat+0x10/0x10 [ 449.819592][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.834409][ T31] do_filp_open+0x1fa/0x410 [ 449.838994][ T31] ? __lock_acquire+0xab9/0xd20 [ 449.850105][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 449.855318][ T31] ? _raw_spin_unlock+0x28/0x50 [ 449.870295][ T31] ? alloc_fd+0x64c/0x6c0 [ 449.875041][ T31] do_sys_openat2+0x121/0x1c0 [ 449.879890][ T31] ? __se_sys_futex+0x36f/0x400 [ 449.888833][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.894749][ T31] ? rcu_is_watching+0x15/0xb0 [ 449.899666][ T31] __x64_sys_openat+0x138/0x170 [ 449.904981][ T31] do_syscall_64+0xfa/0x3b0 [ 449.909520][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.914788][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.921141][ T31] ? clear_bhb_loop+0x60/0xb0 [ 449.925949][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.933956][ T31] RIP: 0033:0x7fa31198d4d0 [ 449.938426][ T31] RSP: 002b:00007fa31284ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 449.950610][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fa31198d4d0 [ 449.958841][ T31] RDX: 0000000000101301 RSI: 00007fa31284ac10 RDI: 00000000ffffff9c [ 449.967013][ T31] RBP: 00007fa31284ac10 R08: 0000000000000000 R09: 0000000000000000 [ 449.975297][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 449.983586][ T31] R13: 0000000000000000 R14: 00007fa311bb5fa0 R15: 00007fffe681ee28 [ 449.992013][ T31] [ 449.995239][ T31] [ 449.995239][ T31] Showing all locks held in the system: [ 450.004614][ T31] 3 locks held by kworker/u8:0/12: [ 450.010376][ T44] gspca_zc3xx: reg_w_i err -110 [ 450.042519][ T31] 1 lock held by khungtaskd/31: [ 450.042722][ T44] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 450.047507][ T31] #0: ffffffff8e539f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 450.162335][ T31] 3 locks held by kworker/u8:2/36: [ 450.167539][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 450.200011][ T31] #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 450.220057][ T31] #2: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 450.229247][ T31] 1 lock held by dhcpcd/5514: [ 450.260666][ T31] #0: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x198/0x740 [ 450.290234][ T31] 2 locks held by getty/5609: [ 450.295330][ T31] #0: ffff8880306d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 450.330023][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 450.360022][ T31] 4 locks held by udevd/5852: [ 450.364844][ T31] #0: ffff888050a630a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 450.400220][ T31] #1: ffff88805bc22488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 450.409821][ T31] #2: ffff88805cf184b8 (kn->active#24){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 450.447608][ T31] #3: ffff88805b544198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 450.484377][ T31] 7 locks held by kworker/1:4/5918: [ 450.489642][ T31] #0: ffff88801e29cd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 450.549988][ T31] #1: ffffc9000aa3fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 450.596814][ T31] #2: ffff888144bb9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 450.630199][ T31] #3: ffff88805b544198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 450.649989][ T31] #4: ffff88805a4fe160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 450.659407][ T31] #5: ffff88803269c9b8 (&go->hw_lock){+.+.}-{4:4}, at: go7007_boot_encoder+0x25/0xe0 [ 450.689999][ T31] #6: ffffffff8e3e0310 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 450.719977][ T31] 3 locks held by kworker/0:7/5940: [ 450.725912][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 450.747119][ T31] #1: ffffc9000aa7fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 450.758035][ T31] #2: ffffffff8e53f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 450.770219][ T31] 3 locks held by kworker/u8:10/6352: [ 450.775648][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 450.785799][ T31] #1: ffff8880b8624008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 450.796846][ T31] #2: ffffffff8e539f20 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xd2/0x610 [ 450.806520][ T31] 1 lock held by syz.4.1245/10459: [ 450.812041][ T31] #0: ffff888144bb9198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 450.821502][ T31] 1 lock held by syz.6.1486/11234: [ 450.826935][ T31] #0: ffff888144bb9198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 450.836230][ T31] 1 lock held by syz.2.1491/11248: [ 450.841442][ T31] #0: ffff888144bb9198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 450.851883][ T31] 1 lock held by syz.8.1852/12663: [ 450.857036][ T31] #0: ffff888144bb9198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 450.866267][ T31] 1 lock held by syz.7.1911/12919: [ 450.871511][ T31] #0: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 450.880700][ T31] 8 locks held by syz-executor/12927: [ 450.886125][ T31] #0: ffff8880240de428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 450.895130][ T31] #1: ffff888040f49c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 450.905487][ T31] #2: ffff8880275f50f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 450.915850][ T31] #3: ffffffff8f1c19e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 450.926330][ T31] #4: ffff88807666a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 450.937322][ T31] #5: ffff88807666b250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 450.947452][ T31] #6: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 450.959227][ T31] #7: ffffffff8e53f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 450.970406][ T31] 1 lock held by syz.3.1920/12960: [ 450.975554][ T31] #0: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 450.985213][ T31] 4 locks held by syz.9.1924/12977: [ 450.990508][ T31] #0: ffff888033c5cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 451.000633][ T31] #1: ffff888033c5c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 451.010450][ T31] #2: ffffffff8fa994c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 451.020651][ T31] #3: ffff88807c747b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 451.030270][ T31] [ 451.032928][ T31] ============================================= [ 451.032928][ T31] [ 451.080206][ T5169] Bluetooth: hci7: command tx timeout [ 451.089084][ T31] NMI backtrace for cpu 0 [ 451.089107][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 451.089131][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.089142][ T31] Call Trace: [ 451.089150][ T31] [ 451.089160][ T31] dump_stack_lvl+0x189/0x250 [ 451.089196][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.089223][ T31] ? __pfx__printk+0x10/0x10 [ 451.089264][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 451.089293][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 451.089320][ T31] ? __pfx__printk+0x10/0x10 [ 451.089352][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 451.089379][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 451.089409][ T31] watchdog+0xf93/0xfe0 [ 451.089434][ T31] ? watchdog+0x1de/0xfe0 [ 451.089459][ T31] kthread+0x70e/0x8a0 [ 451.089504][ T31] ? __pfx_watchdog+0x10/0x10 [ 451.089522][ T31] ? __pfx_kthread+0x10/0x10 [ 451.089552][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.089578][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.089605][ T31] ? __pfx_kthread+0x10/0x10 [ 451.089634][ T31] ret_from_fork+0x3fc/0x770 [ 451.089661][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 451.089689][ T31] ? __switch_to_asm+0x39/0x70 [ 451.089716][ T31] ? __switch_to_asm+0x33/0x70 [ 451.089742][ T31] ? __pfx_kthread+0x10/0x10 [ 451.089771][ T31] ret_from_fork_asm+0x1a/0x30 [ 451.089804][ T31] [ 451.089812][ T31] Sending NMI from CPU 0 to CPUs 1: [ 451.242976][ C1] NMI backtrace for cpu 1 [ 451.242994][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 451.243012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.243022][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 451.243050][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 aa 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 451.243064][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 451.243080][ C1] RAX: 16084c94ff588c00 RBX: ffffffff8196c308 RCX: 16084c94ff588c00 [ 451.243092][ C1] RDX: 0000000000000001 RSI: ffffffff8dc65904 RDI: ffffffff8c04ce00 [ 451.243104][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 451.243116][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fe34330 [ 451.243127][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5cb40 [ 451.243138][ C1] FS: 0000000000000000(0000) GS:ffff88812590a000(0000) knlGS:0000000000000000 [ 451.243151][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.243162][ C1] CR2: 00007ffd6f139b18 CR3: 000000000e336000 CR4: 00000000003526f0 [ 451.243187][ C1] Call Trace: [ 451.243194][ C1] [ 451.243200][ C1] default_idle+0x13/0x20 [ 451.243216][ C1] default_idle_call+0x74/0xb0 [ 451.243231][ C1] do_idle+0x1e8/0x510 [ 451.243251][ C1] ? __pfx_do_idle+0x10/0x10 [ 451.243275][ C1] cpu_startup_entry+0x44/0x60 [ 451.243291][ C1] start_secondary+0x101/0x110 [ 451.243307][ C1] common_startup_64+0x13e/0x147 [ 451.243336][ C1] [ 451.248675][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 451.417003][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 451.427953][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.438022][ T31] Call Trace: [ 451.441306][ T31] [ 451.444248][ T31] dump_stack_lvl+0x99/0x250 [ 451.448849][ T31] ? __asan_memcpy+0x40/0x70 [ 451.453450][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.458654][ T31] ? __pfx__printk+0x10/0x10 [ 451.463260][ T31] vpanic+0x281/0x750 [ 451.467334][ T31] ? __pfx_vpanic+0x10/0x10 [ 451.471845][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 451.477487][ T31] ? preempt_schedule+0xae/0xc0 [ 451.482349][ T31] ? preempt_schedule_common+0x83/0xd0 [ 451.487835][ T31] panic+0xb9/0xc0 [ 451.491562][ T31] ? __pfx_panic+0x10/0x10 [ 451.495985][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 451.501372][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 451.507544][ T31] watchdog+0xfd2/0xfe0 [ 451.511802][ T31] ? watchdog+0x1de/0xfe0 [ 451.516136][ T31] kthread+0x70e/0x8a0 [ 451.520256][ T31] ? __pfx_watchdog+0x10/0x10 [ 451.524942][ T31] ? __pfx_kthread+0x10/0x10 [ 451.529541][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.534748][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.539955][ T31] ? __pfx_kthread+0x10/0x10 [ 451.544560][ T31] ret_from_fork+0x3fc/0x770 [ 451.549166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 451.554295][ T31] ? __switch_to_asm+0x39/0x70 [ 451.559074][ T31] ? __switch_to_asm+0x33/0x70 [ 451.563846][ T31] ? __pfx_kthread+0x10/0x10 [ 451.568448][ T31] ret_from_fork_asm+0x1a/0x30 [ 451.573224][ T31] [ 451.576536][ T31] Kernel Offset: disabled [ 451.580855][ T31] Rebooting in 86400 seconds..