last executing test programs: 6m59.653445744s ago: executing program 3 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)={0x2c, r1, 0x65283e1aaa2ddbb1, 0xfffffffd, 0x1ffffffc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x4880) (async) setpriority(0x0, 0x0, 0x2a14b58) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, {0x0, 0x4}], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 6m59.46022121s ago: executing program 3 (id=95): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000020", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 6m59.337301088s ago: executing program 3 (id=97): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a000107"], 0x144}}, 0x20000000) r0 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="7f552b84e40eb0d1e0c60392d34009a8d15935f66db347340898c2e0f212f85cad7ac3f784dfae9e2c53707f5981b94efba342bf6ea89c2fe35ff39a38881be90a1e482e8d0fdf58964318951543a417277a0e3a0adb9989076d5c1b9941a2b8f139cca669b9fc683015ab1adb8a060778a9f41e527ecff8fcc5afee883d0c918620145dcdc9103a900628b4581ba106c5d4d7e42f07e2b7a352feab745e52fea48d92fab11fa01ac963d54a1d2152def9dd63ff551d815e8cdb5b15ee48d922", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r0, r1, r0}, &(0x7f00000010c0)=""/48, 0x30, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x1c) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m58.904208181s ago: executing program 3 (id=101): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000088a803000a0000008d0000006c07010033d43afffe800000000000000000"], 0x340a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0xff, 0x2, 0x0, 0x3502, 0x2, 0xa}]}]}, 0xa0}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000088a803000a0000008d0000006c07010033d43afffe800000000000000000"], 0x340a) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0xff, 0x2, 0x0, 0x3502, 0x2, 0xa}]}]}, 0xa0}}, 0x0) (async) 6m58.596343784s ago: executing program 3 (id=104): brk(0x20ffc004) getpid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80000, 0x80000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 6m58.331899899s ago: executing program 3 (id=106): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x0, 0xd, 0x1e, {0x1e, 0xf, "d348141f64c77756d2ebd70834966334b64b3ff33dcfa412d73417f3"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000240)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0xc, "d0565db2"}, @global=@item_4={0x3, 0x1, 0x7, "f0c89dd2"}, @main=@item_012={0x1, 0x0, 0xa, "e8"}, @local=@item_012={0x1, 0x2, 0x1, 'v'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4e3}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0x16, 0x100, "25755adc393b5350c89abf91a36b54e994de20d82cd9dc91c990cb7809e79c5c95f55c8ebc688cafd831136bb74069d58fa5ce4969e4291142236f28b051e836109101b65b532af8cfead83e48c1b01ed32641b2d3605eeabc4eeff96d729e53aac1bc3e4a69e8c92a566c5d0a8f6cf86d4a559b78b09461d3270a43a746d3e375e3ca36d3069fb0fb7546860e085dec26087f7a7ef3d862648ef5a0f24699e0a101942779ebc648f300e88cf711bde75f617e3bd8ffdd8fe7f0dc54c6929282fdc6e97b07fa421afe2970a1920df46ed0740ddee15999680879c6da929fb20453561f5bba7d65564e8f1c109f4b9c2c1b4200e62fd143999fc3fdf0b275945f"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000680)={0x20, 0x1, 0x2a, "28ca03367c07396eab36babef1d4f30fad6709301399c28c11afb1c4d2d266cc0b738c4eb827c542eae6"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="400f000094160e7dd4bb5a35860a856d84dd4c8d2706dd164ca0c5c0274975114500008f05052c3a53d618d650a7a0a86a01109100", @ANYRESOCT=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m57.936311002s ago: executing program 32 (id=106): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x0, 0xd, 0x1e, {0x1e, 0xf, "d348141f64c77756d2ebd70834966334b64b3ff33dcfa412d73417f3"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000240)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0xc, "d0565db2"}, @global=@item_4={0x3, 0x1, 0x7, "f0c89dd2"}, @main=@item_012={0x1, 0x0, 0xa, "e8"}, @local=@item_012={0x1, 0x2, 0x1, 'v'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4e3}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0x16, 0x100, "25755adc393b5350c89abf91a36b54e994de20d82cd9dc91c990cb7809e79c5c95f55c8ebc688cafd831136bb74069d58fa5ce4969e4291142236f28b051e836109101b65b532af8cfead83e48c1b01ed32641b2d3605eeabc4eeff96d729e53aac1bc3e4a69e8c92a566c5d0a8f6cf86d4a559b78b09461d3270a43a746d3e375e3ca36d3069fb0fb7546860e085dec26087f7a7ef3d862648ef5a0f24699e0a101942779ebc648f300e88cf711bde75f617e3bd8ffdd8fe7f0dc54c6929282fdc6e97b07fa421afe2970a1920df46ed0740ddee15999680879c6da929fb20453561f5bba7d65564e8f1c109f4b9c2c1b4200e62fd143999fc3fdf0b275945f"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000680)={0x20, 0x1, 0x2a, "28ca03367c07396eab36babef1d4f30fad6709301399c28c11afb1c4d2d266cc0b738c4eb827c542eae6"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="400f000094160e7dd4bb5a35860a856d84dd4c8d2706dd164ca0c5c0274975114500008f05052c3a53d618d650a7a0a86a01109100", @ANYRESOCT=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m54.200295574s ago: executing program 1 (id=423): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x60, 0x14, 0x5, "099ef471b5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) 5m52.456349678s ago: executing program 1 (id=435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5m52.379073465s ago: executing program 1 (id=437): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 5m52.172301233s ago: executing program 1 (id=440): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="320100003a00000000000000e5ffffffe7d007ec84eae6a82ab5e30cff8ffd566b39358bab9559b20cde4f46559f62e553b2644b67c61772b314aeb92b52839d35a9967e56b21cf14f0ea0ba64d9c497329536e4aa056894be9b21b2d5397f8fe7d193b11f213e7c42f7d2d9826677d147"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x300, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5m49.131360718s ago: executing program 1 (id=450): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000008c0)={0x0, 0x15bd, 0xb6ca, 0x0, 0x0, [0x2]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f010000000000000000000624030000000c241b4800f3ff0005008005094581130202000000090401"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="aa2a2ebb2d001800"], 0x18}}, 0x84) 5m47.776652971s ago: executing program 1 (id=460): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'rose0\x00', {0x2, 0x0, @empty}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sw_sync_info(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)='C', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) 5m32.080037844s ago: executing program 33 (id=460): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'rose0\x00', {0x2, 0x0, @empty}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sw_sync_info(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)='C', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) 3m37.424168561s ago: executing program 0 (id=1209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}], 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) write(r1, &(0x7f0000000580)="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", 0xfe0) getsockname$ax25(r1, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @netrom, @netrom, @netrom, @null, @netrom, @rose]}, &(0x7f0000000080)=0x48) syz_usb_connect(0x2, 0x24, &(0x7f0000001480)={{0x12, 0x1, 0x250, 0xac, 0xdd, 0xe3, 0x8, 0x12d1, 0x3605, 0xe4b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6c, 0x20, 0x7, [{{0x9, 0x4, 0x3d, 0xa, 0x0, 0xff, 0x2, 0x76, 0x3}}]}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3m36.640026403s ago: executing program 0 (id=1221): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getrandom(&(0x7f0000000240)=""/282, 0xfffffffb, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x1, 0x4, 0x3, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000540)) r5 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c6de1400", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES64], 0x80}}, 0x4881) 3m36.042537832s ago: executing program 0 (id=1222): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) lseek(r0, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002030102000000000000000001000000080001000100001f0900020080000000010015da05dc0000"], 0x28}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async, rerun: 32) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x4) (async) copy_file_range(r6, &(0x7f0000000080), r5, 0x0, 0xfffffffffffffff8, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0xa, 0x5, {0xfffffffffffffdf4, 0xd, "000100"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="01000000020000000000006bb55a06630bf7c045f94cd97703942b", 0x1b, 0xffffffffffffffff) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="2024200000002121c55252e9fe45ad7928a617fe454994b67c595701000100f66f7ec78d4b2edb1bba7f1a87ad5802d0010087b84b8a79f5"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x530f0a58f6b02076, "658ac1ee"}, @main=@item_4={0x3, 0x0, 0xa, "1af0bbea"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xe2e}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0xd, 0xd3, "0b9bd1f571a6611670d146ccab90c4f66780b0b26fd69f58a3b451dd32f7203a6a094f3fe0ff46a4428c407f7834667aaa9eb76a8e5c58acd7bf66ffc036052fefb5731002bffff812b7c193b8ff0c9c58af48ff0a1fd14d7be4db25e51307539c4e3f51f3b1923ea9d4166e749ff28c1e15ac3db9be4e18ffdabdbb4f79d924695d14f430bb28adc4f475d8a8365f9f9278fb03296dcb5f669bf2b37e5e3fe3fa068de857e70e4be7f78b5283db2b93b616514c9be32823dfb516636124b02c242f131f0d73ebc6c414314ad08f0a71f11126"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x1, 0xce, "7642245d4c282630dfd462db0cb167736ffc4f3b42db5abe3a45f4e6970ba327769e8cf266bb57112d90f07acdd96f091f4720cf82da08b197e5512524501a6c1e12aca53ec859023d02782d9a20745601e985c8660821d4447795691eadd4a19d171f083f2a770ec8bac05fb31e1af742c9ffca79d62bce0fc4314e55b6e7cbcec84ec249a916f8980c7ff3f41de14bbda6673ec1312ec7734f7e7517bc17bb2ae6ac34068398e567f4748b2ceec5be7f62d3334f2578a0effefba9462ee22ea11539df5cba053abdbae8e80803"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) 3m35.979458891s ago: executing program 0 (id=1223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3m35.799989993s ago: executing program 0 (id=1224): syz_usb_connect(0x2, 0x90e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x4, 0x3e, 0x53, 0x40, 0x7392, 0x7318, 0x5988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8fc, 0x4, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbc, 0x63, 0x6, 0xe6, 0x1b, 0xf0, 0x7, [], [{{0x9, 0x5, 0xf, 0x8, 0x10, 0x7, 0x2, 0x5, [@generic={0xfd, 0x7, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x6}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0xf, 0x2, 0xd, [@generic={0x10, 0x4, "9859594dcfd6323c96cc5ef08520"}, @generic={0xdb, 0x21, "8ecfedef5c9ab09312440935a40e123ff5d7870ed4edd24e6acf72e14cd6cd3af135ce4fb2e31dcf92e85d10549c19f493338b2429de5b99f9440f61e1d34fcbb60779185ca442572f7d1c549728d5ca5f2e7040a333dfe8a6136e51075f83bb27a44195dbaf48101173234693fc06788f83238899b0dc84bf4476ad19273e678349c67fcecd65d7a49a9ad52078afc89d3a2c9ca53dcfa809699a80be58eabd432f645d91c49dde9d7dca20da88f0b53ee4b206a8bf40285b2f30a5dd54262b6bb321d679edf5589ff626536f73ec9e1b819c2097c649f9df"}]}}, {{0x9, 0x5, 0x87, 0x0, 0x20, 0xc, 0x3, 0xc, [@generic={0xd, 0x24, "1c5e3bdc5990cc59761722"}, @generic={0x3f, 0x5, "cf1bf656b696e66ffb1aa3f2ffcb1250eb2cc3407f02cb5ed31c800e8e9444a4619a5c5d95f6dc8eb76fd4c72ce122177424fb2002e30813768d2012f5"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x9, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x6, 0x32, [@generic={0x33, 0xd, "1fdb1985cd7f3bbdb814e9bd76acbf00ffe92b21e8c3aeb8c83c73b28512597f302f18be616786601286c03774867cbc0c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0xb, 0x5, [@generic={0x10, 0x24, "74f0c4077c240415943c7d59bb25"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}]}}, {{0x9, 0x4, 0x3d, 0x0, 0xc, 0xc9, 0x2b, 0xd, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "2a8df87c62b0"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2000, 0x6}, {0x6, 0x24, 0x1a, 0x2}, [@acm={0x4, 0x24, 0x2, 0x4}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "e8417f6d"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x9, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x200}, @country_functional={0xe, 0x24, 0x7, 0xa3, 0xfffb, [0x9, 0x7f1, 0x4, 0x9c]}, @mdlm_detail={0x48, 0x24, 0x13, 0x3, "2466e163b219095b20fffffd7d960601203533ff6fff11c0a958b26135d2107ff3e7ad66455af2df68b1b6b5c9aeb481f8abef0b3ff132e375006c7114f7d01ff4ad5979"}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x2, 0x78, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1e, 0xd610}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x99, 0x9, 0x5a}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xf, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7}, @generic={0x4, 0x22, "d31c"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x4, 0x3, 0xd6, [@generic={0x60, 0x31, "d88eba601e4130a546ea18fe43cb3c8249ea71390d94ac82ecb133e35e2c8d5ad8a588e831200bfe3d9a8021ce48f374eec3e5e30739d3743c0ac0b4679899708b797119699b3b5848944ee02ab17cb64761e35e03d54e4f4405f0eee98e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5c, 0x400}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0xae, 0x4}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x4, 0x0, 0x19, [@generic={0x10, 0x8, "2ffc8dd48263fce912bba42992f4"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x20, 0xc}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0xd, 0xd2, [@generic={0x73, 0x4, "1602c7b3c0f4d8780dc94268498eb8b648a91f6e0becbcd5f9cd2dd2613b4974841e85e2881c94bc7bf8343303e1c9efc995d2250899bb7f21cbc58a7bf0e31b1606a8d386fcb31966c9ce6b800b6d58c7d0e0964a27fc0097df7b2b6ac85a8f4e0e153f82287bf15a5ba38a5b4f23da1b"}, @generic={0x75, 0x15, "f927827d1c0aa8ca5f5627e065d70035712463cf6a957aa20935de7265024facab016caa90f6dae9db37a168f6349e4f0db7544bfe34d854109e191878c43124f93f67ed69425265600c829b34c7547e694d8d5c68ed76310d400fe3010463ec43ecaced83e1c7ad03f688536b68ccaee95e95"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x3, 0x4, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x80, 0x2, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x90, 0x40}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0xf8, 0x7, 0x1, [@generic={0x38, 0x2, "dc866738b4c0b547559c99ebfb3d1b2509169d475406e5fac81505c1da47b2b6fd83b2303f5fd316147407f2fd7528764d4ca2c8c10b"}, @generic={0xa6, 0x24, "b2ac2b896d4bcdf0b6852d9f2966645d477714a0e29233464f39a00e1d8e21b883a53cb25411d145c93f1f8b2b44d0fb1089ebb41c5ecad78f069aa7887a8c73cdf125d647e6c15cb6c3730a0d972d67b6488e05ef00d1caef29438c1e7d13d700553ad5b7c980824ae6cc10ada4c69e34f0e74691c663f6d777b75e231f1b39689435b3f1b336b96682133c38200df8a6c3005f508685a9dd191d847286d2511bb95dfa"}]}}, {{0x9, 0x5, 0x80, 0x14, 0x20, 0x2, 0x7, 0xe}}, {{0x9, 0x5, 0xd, 0xf419d2911dab26f5, 0x20, 0xf9, 0x7f, 0x10}}]}}, {{0x9, 0x4, 0xe0, 0x78, 0x6, 0xf0, 0x4, 0x0, 0xcf, [], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0x8, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x43, 0x1, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x6, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4, 0xf7, 0x80}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0xf7, 0xd4, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xd, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf0, 0x7}]}}]}}, {{0x9, 0x4, 0xca, 0x38, 0x2, 0xff, 0x9a, 0x49, 0x88, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "11"}, {0x5, 0x24, 0x0, 0xccf}, {0xd, 0x24, 0xf, 0x1, 0x795, 0xac0, 0x7}, {0x6, 0x24, 0x1a, 0x1000, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x737c, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xe, 0x6b, 0x4}, @obex={0x5, 0x24, 0x15, 0x5160}, @dmm={0x7, 0x24, 0x14, 0xb, 0x3cc1}, @obex={0x5, 0x24, 0x15, 0xff}]}], [{{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x2, 0x95, [@generic={0xed, 0xd, "ac8d19108fb262a55d46e304c95c4700697b37c62f3ac052e99f8adb6fa48fde48655556edb62d22e28ef0e87460017dfcf8b577f32dad6bba2be702983681894b007ece5d3f880495e55a4ca389d123fd1da93fcec290f5d84ff30131ae2ce166202df631f1d3e0e59f9f86678cbe60a6da87f46f38a864c73844123dbe7ff9252f2915328758cf28ff8ebcc75ac560f7acc95f3e350eef92cea8fecd2c5a8186a8ebdc76f04c64845c017c1b4e04bb769193d9904679a02a6e5abb8e0f98bd9a1312789276a9e076c36475f155ca2f428d3edb5c193b0cda79aa0ecf6cea8ee1201b23857b9bd3666108"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x48, 0xe, 0x9, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x4}, @generic={0xf6, 0x22, "e56a0f9a0f52309d6f5970bb0f7e553f3c215da8b844d9b274489f6a9ea6f770e251937487b9e4c78e99f14cebf1c9fca0815f7002feea72bcad939dce2b84b8b08f8d0112379a5cc0d3e2a1f12488bc15998a9b6507d46a08ac31528392599b5e11df79936d60fc95ebf7afa26bacdb4c6ed24080020324d7a3c7f9100cebcb9bf20046355615ccf6d3dbca24dbcb0e8c1b0e08a84c47fda6a26ee19d82753d234ec6b643455906cb2800681d12fe0fe9e3160bcf7e73240836a38f382fb772b24e4b6bc460f99f314e861bef49aa85431b313d18ce8a1e8dfbd1994a24c531d5d92eef0d94a7ca3e879c05a557730cda930f63"}]}}]}}]}}]}}, 0x0) 3m35.480285889s ago: executing program 0 (id=1227): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @mcast2, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0)=0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) 3m35.257851783s ago: executing program 34 (id=1227): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @mcast2, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0)=0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) 2m6.592111583s ago: executing program 6 (id=1662): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x2}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000300)={r5, 0x1, 0xed, 0xffffff72, 0x7, 0x5}, 0x14) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0xe2, @loopback}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="a969e2b7ad3ed7c8302f99b97e92c38d0d7136eaa66cbe693749efe14825c485981601f83f363e74a6d38459ef8b135be67549a8daa23f640c2179cc46c3b28c2978f6c7ee6455003a16cafd5c021da0667fbe51644b7cfbfefb016e793d67f59c9d1753cc8f43b77626357eeefbd7dc52972ffaaf552f232e0bed9c1cef0c76ed1586de352a3af2f4a70956335fef0fc58c3293e0699364d2516908a8f3b92f9e38e83f3bc9049ce000a2a80886f466aab35103198815407c2cf830b0c1d005e7fedc16b1657ffa2d6a082b4e63443fc0d81f3d993c43b1a960983f9540", 0xde}, {&(0x7f00000001c0)="e40988edd622eaf9bae9e01a551175d89a5edc8e887e06a7dcd0925cfe16dbdc14691779", 0x24}], 0x2, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0xfffffffb, 0x400, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xb1, 0x201, 0x12, 0x3, 0xe4d3, 0x5fbd}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x820a, 0xc1de, 0xac, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0xc0, 0x8080}, 0xbb067da4f9d1faa1) r6 = fsopen(&(0x7f0000000080)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000340)='\x19\xb2\x15\xad#$Y\x13\xf9:\x06X\x91\xb2w\xcc\x9am\x1d+\x00\xbe\xfe\x87\x89\xc9\x9aG\xa2:n\x9f\x18r\x8d\x03-\xe7AO\xe5\xe2LA\xe1\xd4\x06\x96]\xb5\x8bo\x11\x81\a\'\xec4T\xe1B\xb2\xb7\xa8q\x82\xbb\x85Q9\xf5\x9b\xd2\xba\xa46yC\xf7y', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r6, @ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 2m3.497401162s ago: executing program 6 (id=1691): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0xe, 0x7}, {0x9, 0x5, 0x8, 0x2, 0x20, 0x0, 0xad, 0x8}, {0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x4, 0x2}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x40, 0x4, 0x8b, {0x8b, 0x6, "f995be6fa67b34d663ebf2f64a3d86b37580118c925a83a4c151e9e23a02340fb268e405db567e9ccc3b66e6c88b645914be9d20a548a2839c0d7d50ae9abe05c63e3361ef12d1fb27211c059f48632479304c512c35b15d14ab289c315a4979074e12ff50225c9e72a5820d44c9ad057bd85c2f30585136b0814ef6b2ac292109870bb4d7fd0b99ae"}}, &(0x7f0000000100)={0x0, 0x3, 0x24, @string={0x24, 0x3, "cf76bb0a9bfbdd5fea3b55e481f1a9055a5c436589a8ea1c316ce3527f3f0093f01a"}}}, &(0x7f00000004c0)={0x1c, &(0x7f0000000380)={0x40, 0x1, 0xef, "91834d2b0cb4e674ccdd7efaac191e9dd3fa33dd020095cddbf9501fcf91aeb64c5b8b1539bd5f713e3503d827e782aeaab9f07bb8a928368c54f262b1716be1a4f2dbbb072c0760959c78be3c0ea64ffdeb45b09258865a60e65e932dbc75816acc4b0a2826b781a8169c95b13c156c6fc20aec3102155b5aa91e43abf703c9e6c94d02ea7e9dcade72ae84d245dbf120c82139912577352c87ad10cc416e3b9a840d2fee1c4203d063c068982a7b8bc63f0e7f1d752628a979e95c021a2f952f5389c85a7e33498fbf3baf9213953e5f2644c658896c0bf54214cb3fc0afeeb7911ff4b9cc149d32b447ea186990"}, &(0x7f00000007c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000480)={0x21, 0x0, 0x3, "2fe5e0"}}) (async) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @empty, 0x3, 0x5583, 0xb, 0x400, 0x9, 0x80000040}) (async) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x0, 0x4, {0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c0c1) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xb4ab450f201fcf97, "d1f71aed"}]}}, 0x0}, 0x0) 2m2.55079912s ago: executing program 6 (id=1696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = fcntl$dupfd(r0, 0x406, r1) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) fcntl$dupfd(r0, 0x406, r1) (async) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) (async) 2m2.502126258s ago: executing program 6 (id=1697): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103c42, 0x10) pwritev2(r1, &(0x7f0000001000)=[{&(0x7f0000000f00)="d5", 0x1}], 0x1, 0x5405, 0x0, 0x1a) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 2m2.440439567s ago: executing program 6 (id=1698): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861acffffffffffffefff00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 2m2.291908947s ago: executing program 6 (id=1699): close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000080)={0x1, 0x5, 0x1000, 0x35, &(0x7f0000000040)="a203f68ad60a447a87961f554d9a4799fe08fc66b91af1a681dfaed6f13ef441fd6526504ae497c45381eb0ea400b5664d13581d3d", 0x90, 0x0, &(0x7f0000000140)="6700dc442ba75a427a70d908fd40dd684044ffcaa5b58b58e5a7cc98adca6822df69d79abfb0af6103a8c5c121a5c74c9fd567db73e710fd259df0fadd9324ae7a106a843bcbf30f5e1e19aca09ac0cfad612f5fbcebaadb7ee2ba59f638c7f60ba2416c062bdf90453c76cf36e32d2aafcf0cc1111ef470f6560c8c7631fa3b7f935704714caff42b7ba271e436c8fd"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x401, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000009030000000000000000000700000a0900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setuid(0xee00) sendto$packet(r4, &(0x7f00000000c0)="3f121c00eee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r8, 0x1, 0xb, 0x6, @multicast}, 0x14) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x90104000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x164, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x164}}, 0x4080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) preadv(r10, &(0x7f0000000500)=[{&(0x7f0000000200)=""/90, 0x5a}], 0x5a, 0x1fffff, 0x0) getsockopt$rose(r9, 0x104, 0x2, 0x0, &(0x7f0000000340)) fchdir(r3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) 1m46.994033766s ago: executing program 35 (id=1699): close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000080)={0x1, 0x5, 0x1000, 0x35, &(0x7f0000000040)="a203f68ad60a447a87961f554d9a4799fe08fc66b91af1a681dfaed6f13ef441fd6526504ae497c45381eb0ea400b5664d13581d3d", 0x90, 0x0, &(0x7f0000000140)="6700dc442ba75a427a70d908fd40dd684044ffcaa5b58b58e5a7cc98adca6822df69d79abfb0af6103a8c5c121a5c74c9fd567db73e710fd259df0fadd9324ae7a106a843bcbf30f5e1e19aca09ac0cfad612f5fbcebaadb7ee2ba59f638c7f60ba2416c062bdf90453c76cf36e32d2aafcf0cc1111ef470f6560c8c7631fa3b7f935704714caff42b7ba271e436c8fd"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x401, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000009030000000000000000000700000a0900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setuid(0xee00) sendto$packet(r4, &(0x7f00000000c0)="3f121c00eee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r8, 0x1, 0xb, 0x6, @multicast}, 0x14) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x90104000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x164, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x164}}, 0x4080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) preadv(r10, &(0x7f0000000500)=[{&(0x7f0000000200)=""/90, 0x5a}], 0x5a, 0x1fffff, 0x0) getsockopt$rose(r9, 0x104, 0x2, 0x0, &(0x7f0000000340)) fchdir(r3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) 44.652135536s ago: executing program 2 (id=2170): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="df41"], 0x0) openat$mice(0xffffff9c, &(0x7f0000000100), 0x10000) 44.11173016s ago: executing program 2 (id=2172): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="201410"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) 43.476272173s ago: executing program 2 (id=2173): r0 = socket$kcm(0x10, 0x7, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_io_uring_setup(0x77ed, &(0x7f0000000640)={0x0, 0xec25, 0x2, 0x1, 0x40000333}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r6}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0xd29, &(0x7f00000001c0)={0x0, 0xa15e, 0x0, 0x0, 0x2d}, &(0x7f00000000c0), &(0x7f0000000240)=0x0) r9 = syz_io_uring_setup(0x3358, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x0, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000400)) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write(r11, &(0x7f0000000100)="97", 0x1) poll(&(0x7f0000000000)=[{r9, 0xd010}], 0x1, 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r13, 0x84, 0xe, 0x0, &(0x7f0000000140)=0xb0) ioctl$sock_inet_SIOCSARP(r12, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) r14 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x600, 0x51, 0x8}, 0x18) syz_io_uring_submit(r5, r8, &(0x7f0000000380)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r12, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', r14, 0x400, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0xb, 0x4) r15 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r15, 0x40045613, &(0x7f0000000240)=0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) 43.422597445s ago: executing program 2 (id=2174): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000007c0)={"810800", 0xc5b2, 0x6, 0x4, 0xc1, 0x8000003, "33777877cf34c4040018a3d03a1000", "0001d615", "0200", "05ffffbf", ["c386afeefff8ffffff7eec01", '\x00', "65f98152ac3d7ec700"]}) 43.336095183s ago: executing program 2 (id=2175): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000900", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 43.087270214s ago: executing program 2 (id=2176): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES64=r1, @ANYRES16=r1, @ANYRES32=r0]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000080)={"5fe06023425fa8cc2d9cc9df672e6b1f6695f504d97bb62a223265edd5c3", 0x3f}) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050003"], 0x7c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) r10 = dup(r5) write$FUSE_BMAP(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f00000030c0)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b37090868e0878f0e1ac6e7049b3b44959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccd7d01000000000000a1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a4aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c8594c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000000000000070000800400000000000000ff7f00002700000007000000050000000000000000000000000000000b000000080000000000000003000000ffffff7f05000000ffff00000000000000000000000000000b0000005f0e00000100000007000000f40d000006000000010000800000000000000000000000000d000000bb020000010000000d00000003000000ff070000000400000000007f82be7601de6cf50000000080000100000400000006000000030000000100000003000000000000000000000000000000010000800200000003000000f7fffffff9ffffffff000000000000000000000000000000000000000b"]) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000008c0), &(0x7f0000000140)=0x8) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 27.163157244s ago: executing program 36 (id=2176): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES64=r1, @ANYRES16=r1, @ANYRES32=r0]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000080)={"5fe06023425fa8cc2d9cc9df672e6b1f6695f504d97bb62a223265edd5c3", 0x3f}) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050003"], 0x7c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) r10 = dup(r5) write$FUSE_BMAP(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f00000030c0)={0xf, {"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", 0x1000}}, 0x1006) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000000000000070000800400000000000000ff7f00002700000007000000050000000000000000000000000000000b000000080000000000000003000000ffffff7f05000000ffff00000000000000000000000000000b0000005f0e00000100000007000000f40d000006000000010000800000000000000000000000000d000000bb020000010000000d00000003000000ff070000000400000000007f82be7601de6cf50000000080000100000400000006000000030000000100000003000000000000000000000000000000010000800200000003000000f7fffffff9ffffffff000000000000000000000000000000000000000b"]) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000008c0), &(0x7f0000000140)=0x8) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 9.457012751s ago: executing program 8 (id=2383): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac55aaffff00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 9.180338528s ago: executing program 8 (id=2384): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b753b5086d04961997b1452bb58f5c098a08113a010203010902120001000000"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xe24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x1, 0xd8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x24, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x1, 0x9, 0x20, 0x7f}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6ba1c9a565f1b85ac46c3f9a0df7df45"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "205c4bfcc3c7932028ef382c60609879"}, @ssp_cap={0x18, 0x10, 0xa, 0xf, 0x3, 0x7, 0x0, 0x2, [0x0, 0x30, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xb8, 0x4, 0x4, 0x8}, @generic={0x22, 0x10, 0x4, "adddab9c52098c5d295818cc8d355014c46e24e5af22e3da191e0c2c910e46"}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x3c, &(0x7f0000000200)=@string={0x3c, 0x3, "489f71bf10788d437d4c19ccf3e92ca41eabf0b30200819459c0a65ff963b7ea17c8fc770a8667026d52b96fb719b981eae7de76adf00eccaf5e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42d}}, {0x85, &(0x7f0000000280)=@string={0x85, 0x3, "f1390c768ecfe52698ea555abed774a3653c7d621e25eb799368cf05c6c4258721d05118d353751edf4a048e188644f8a9488d1c20dc2f54af28170639f2d619cbfe08afb5333dc594e43338542647d9d072a12895862d61d33821a2439424cd6629ccc5f1726e9bea6f4b603e8bf62fd7e0ac40f242084beae19c6fdc8426bffd4903"}}, {0x82, &(0x7f0000000340)=@string={0x82, 0x3, "97688b588c31c80615784664b833494f0acd3462f94be8fbd33b4906dc7f78ef147c26f75ad78aff34c11ad96ed993d05c43e1f3d914731e8699c4be2bc7dbb2792169f24b9a4628dbbf48f33abf7c472745db373254979a536311055e5ceb3c523c4da3fa718a082f9d49cf9f5c1c258128eb3ce9e98520af00ef6d487543c0"}}, {0xc4, &(0x7f0000000400)=@string={0xc4, 0x3, "6f995eac1439a3c946639459f2e087826361cf8970b681d38e6757be6a266cb6caf384347ea20fbc4c8081473b0f262d150c126613a533025c6f9b84e891d9ac79ffe3ad9fd64f1d374dfc800621bc1eddb39d5963bc975a32becb8ab9ac24cb968ca5477201d6bcf15fe03b0ba34aae5bcbf104589b78aa52a5e3fa62105621377dd3646b2c6aeb7dbdda6f58b7c5d7544ff85b263d677e911894e2c965984db87bd5fa73f1ff08ae8d593682738d74372d2c0f389c905048c2a76ec7c1c3b29361"}}, {0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "06c571e14c23c0c903a5908e5c89ccf233278e3e03a127b84e380a98154577ffff630eebb915946b08dad94b864e765482f9f2823636448e557d4b305a955554940503cf39d5cd6e987bfdb739cf6b25b1310cc3afad25e6c9b327820dc03d72b60367e828fe1d648a23a0e1bc81ab882977bebad23bb6f229e0aefff3f1dcc19642cf0cce27dff1030f126869089ed8e3c5ab06332319f07717dcb42740bea039fa7957a9441d217b2a915ab12c694352ef9045d5fe1a55a7d9c7e110e9aea02894ca2fd537aa8a28"}}]}) syz_usb_ep_write(r0, 0x4, 0xd9, &(0x7f0000000680)="a0b0fba0043cebfe2c7a96d22b99df90131846f6b502873b904ca0a3609dbdc4f921fcf420f1beedb3c2245be61948d0428acaf258a85e338e1887c5c47fffdb5fb42ae48c4c2190d6599472021257eb5ad88e0d6f5c1a4884f294e981c005dce387dbce91bb6362b2644bba10902df0d28653927925822e91be4ee12e1a13c0ccdf81b2f63661e41643e0158fb419ecf1890ad6f2001efb08be1c61234e78155f53247b3a6b0785942be9eb1ef558c9d3dbdf5463a22f12ca3320a2f2cc2edeb713cc5300f68772a970157e4142a129283f602603a073db79") accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) 8.310554923s ago: executing program 5 (id=2391): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000600", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 8.191473543s ago: executing program 5 (id=2392): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac56abffff00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 7.992342095s ago: executing program 5 (id=2393): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000380)="8167", 0x2}], 0x1) 7.337174344s ago: executing program 5 (id=2395): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="67727071756f74615f696e6f64655f6861729311646c696d69743d6b2d"]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000bb948dcf6034e7648c839204178a992631cd9dbf4ba37814be4ac0ca4be776aef214944cfeaeacf9757f0d14f0eb8758ef2a8f3d0048e1318b6d", @ANYRES16=r3, @ANYBLOB="cf0400000200000000001300000008000300", @ANYRES32=r4, @ANYBLOB="110013003609603030b0858536029212180000000a000600080211000001000006001000800500000600120001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa9b, 0x4a}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xaa, 0x4c}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3b2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 7.204035738s ago: executing program 5 (id=2396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) syz_emit_vhci(&(0x7f0000001b40)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x3c, r2, 0x21, 0x70bd27, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x24004000) 7.179684585s ago: executing program 5 (id=2397): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000007c0)={"810800", 0xc5b2, 0x6, 0x4, 0xc1, 0x8000003, "33777877cf34c4040018a3d03a1000", "0001d615", "0200", "05ffffbf", ["c386afeefff8ffffff7eec01", '\x00', "65f98152ac3d7ec700"]}) 6.117152455s ago: executing program 8 (id=2405): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000700)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e45366bad6062a620f3066b9370200000f320f01d1440f20c066350f000000440f22c066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x76}], 0xaaaaaaaaaaaaaae, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x5, 0x0, [{0xc0000001, 0xa, 0x0, 0xfffffff8, 0xff9, 0x0, 0x7fffffff}, {0x80000008, 0xfffffffb, 0x4, 0x9, 0x1, 0x6, 0x33}, {0x40000000, 0x72a, 0x6, 0x1, 0x7, 0x6, 0x4}, {0x1, 0xb, 0x1, 0xfffffffc, 0x101, 0x5, 0x7}, {0x7, 0x1, 0x5, 0x1, 0x5, 0x3, 0xa}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x7, 0xff, 0x4, 0x4, 0x2, 0x3, 0xef, 0x1, 0xf2, 0xf, 0x7, 0x4}, {0xffffffff, 0x4, 0x24, 0x5, 0x4, 0x10, 0xb7, 0x2, 0x2, 0x3d, 0x2e, 0x5, 0x7}, {0x0, 0x4, 0x8, 0xf7, 0x1, 0x9, 0xf7, 0xff, 0x5, 0xaa, 0xfd, 0x5, 0x10}], 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf252700000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r9, 0x4068aea3, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) fcntl$setflags(r2, 0x2, 0x0) 5.06846532s ago: executing program 4 (id=2410): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e9e, 0xfffffffc, @mcast2, 0xd2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0xffffffffffffff15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000001100)={0xdf, 0x0, 0x10000}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="00003dcb8bcf959fa789510000", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf2523000000"], 0x14}}, 0x0) 4.939222023s ago: executing program 4 (id=2411): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000900", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.756173953s ago: executing program 4 (id=2412): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x20, 0x0, 0x0}, 0x58) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') 4.424088931s ago: executing program 4 (id=2413): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x40, 0x1, 0x3, "060bfc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"8ca06aaf", 0xe, 0xf4, 0x8, 0x5, 0x4, "06c16e860656fe4fa97ab8d34d18aa", "9a6b4350", "35865f85", "31055a9d", ["6b448ccb54ef9ea9d6774b6d", "ff61e9fe49a7aaae9e76e16d", "58e20c75599c3641bc797367", "354f33fd63593395a236c9fd"]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x109) syz_usb_control_io(r0, 0x0, 0x0) 3.218075691s ago: executing program 4 (id=2414): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) r7 = fanotify_init(0x81, 0x40000) fanotify_mark(r7, 0x105, 0x40001032, r4, 0x0) read$FUSE(r7, &(0x7f0000002300)={0x2020}, 0x2020) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002cc0)=ANY=[], 0x78}, {&(0x7f0000002980)={0x10, 0x34, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x6, 0x0, 0x0, 0x40}, 0x8084) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0xffffffffffffffff, 0x0) 2.800398285s ago: executing program 8 (id=2415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x28, 0xc, "2071efeabe237312e2ea90ce53c4c2bd7b9e58c1be74406bcc05c8511017f194a7cc0400"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) 2.500047493s ago: executing program 8 (id=2416): prctl$PR_SET_VMA(0x53564d41, 0xf4, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008b001100060049"], 0x2c}}, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) socket(0x2c, 0x6, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockname$inet(r4, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = creat(&(0x7f0000002000)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0x1, 0x0, 0x0) shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240), &(0x7f00000001c0)=ANY=[], 0x0, 0x0) preadv(r6, &(0x7f0000001640)=[{&(0x7f0000000000)=""/214, 0xd6}, {&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/155, 0x9b}, {&(0x7f0000001400)=""/198, 0xc6}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001700)=""/110, 0x6e}, {&(0x7f0000001500)=""/26, 0x1a}], 0xa, 0x8, 0xfa9) 1.274234076s ago: executing program 7 (id=2418): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000005b00)={0x6, 0x118, 0xfa00, {{0x0, 0x80000000, "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", 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, r1}}, 0xffffffffffffffdf) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$P9_RVERSION(r3, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001400)={{0x0, 0x0, 0x0, r5, 0x0, 0x10, 0x1}, 0x0, 0x0, 0xffffffffffffff63, 0x8c17, 0x72e, 0xffffffffffff37d6, 0x37, 0x1, 0x3, 0x100}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20002, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_uid={'access', 0x3d, r5}}, {@access_any}, {@version_L}, {@msize={'msize', 0x3d, 0xffffffffffffffff}}, {@privport}], [{@smackfsfloor}, {@hash}]}}) 1.120344747s ago: executing program 7 (id=2419): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861acc9ffffff00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 1.076619677s ago: executing program 7 (id=2420): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0041a9e50b00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 963.940645ms ago: executing program 7 (id=2421): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x50, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x2, 0x7, 0x2, 0x81]}}, 0x5c) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 596.175862ms ago: executing program 7 (id=2422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x0, 0xf4, 0x40000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x0, 0xf4, 0x40000}, 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x7c}}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) (async) 505.171673ms ago: executing program 7 (id=2423): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x2000000000000000, 0x0, 0x4, r2, 0x800000800000000}) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SIOCAX25GETINFOOLD(r0, 0x541b, &(0x7f0000000680)) 125.752662ms ago: executing program 4 (id=2424): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0xfd, 0x7, 0x2, 0x0, 0xc8, 0x3, 0xed, 0xd, 0x52, 0xf6, 0x18, 0x0, 0x0, 0x2, 0xd, 0x0, 0x8, 0x0, 0x5, '\x00', 0x0, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x4b2c, &(0x7f0000001480)={0x0, 0x37f, 0x400, 0x3, 0xba}, &(0x7f0000001500), &(0x7f0000001540)) syz_io_uring_setup(0x6f06, &(0x7f0000006d40)={0x0, 0x6b8, 0x20, 0x3, 0x1f5, 0x0, r5}, &(0x7f0000006dc0), &(0x7f0000006e00)) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x3) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r7, &(0x7f00000002c0)={0x2020}, 0x2020) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000300)="ed", 0x1}], 0x1) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80e85411, &(0x7f00000022c0)) r12 = signalfd4(r3, &(0x7f0000000200)={[0x2]}, 0x8, 0x409437e241a59c97) getsockopt$sock_buf(r12, 0x1, 0x1f, &(0x7f0000002400)=""/99, &(0x7f0000000280)=0x63) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002480)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r13, 0x4018f50b, &(0x7f00000024c0)={0x0, 0xd2, 0x7fff}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010033797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400000000a0900010073797a3000000000140000001100010000000000000000000000000a"], 0xf8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002300)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000300000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20000080) 0s ago: executing program 8 (id=2425): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00', {0x3, 0x2, 0xeb3, 0x6}, 0x2f, [0xdc, 0x7, 0x4000000, 0x2, 0x3, 0x8, 0x18, 0x3, 0x4, 0x1c5, 0x20000000, 0x5, 0x8000, 0xfffffffb, 0xffff, 0x3, 0x7f, 0x8, 0x101, 0x2, 0x3, 0x3ff, 0x4, 0xff, 0x5, 0x7210000, 0xc2a, 0x3, 0x2, 0x8, 0xe9a, 0xe, 0x2, 0x4, 0x7, 0x1, 0x8, 0x4, 0x5, 0x9, 0xf, 0x800, 0x9, 0x54, 0x1, 0xa, 0x80000000, 0xc7ff, 0x1, 0x3, 0x400, 0x9, 0x3, 0x7fffffff, 0x2, 0x3, 0x1000, 0x6, 0x3, 0x1, 0x3, 0x200, 0xe, 0x1], [0x6, 0x9, 0x2, 0xb, 0x2, 0x5, 0x8e63, 0x7, 0x0, 0xfffffffe, 0x578, 0x4, 0x6, 0x2, 0x40, 0x9, 0x8, 0x5f, 0x2, 0xfff, 0xffff19c9, 0x81, 0x3, 0x800, 0x3, 0x0, 0x2, 0x7, 0xf4, 0x9, 0x9e, 0x254, 0x6, 0x1, 0x8001, 0x5, 0x62, 0xe, 0x7fffffff, 0x2a9b, 0x7fffffff, 0x7, 0x0, 0x9, 0x0, 0x502, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x3, 0x2, 0x9, 0x8f6, 0x100, 0x5, 0x5, 0x7, 0x101, 0x8, 0x8, 0x81], [0x5, 0x9, 0x3, 0x10, 0x7fffffff, 0x2, 0x3, 0x4, 0xfffffe01, 0x2, 0x41, 0x5, 0xf, 0xe, 0x9, 0x8a, 0x5, 0x4, 0x7fffffff, 0x9, 0x80000000, 0x7fff, 0x2, 0xaa0, 0x5a, 0x80, 0x4, 0x1, 0x0, 0xffffffff, 0x400, 0x6, 0x1d, 0x80000001, 0x4, 0x4, 0x6, 0xffff, 0xba3a, 0x4, 0x81, 0x1, 0x2, 0x5f0b, 0xa1, 0x4, 0x7, 0x6, 0x1000, 0x6, 0x800, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x3, 0x3, 0x9, 0x1, 0x73, 0x4180000, 0x8], [0x2, 0xd, 0x9, 0x200, 0x7, 0xdb8, 0x4, 0x9, 0x1000, 0x80000001, 0x6, 0x4, 0xfffffff9, 0x8001, 0x2, 0x4, 0x7, 0xffffff15, 0x0, 0x9, 0x8, 0xfffffffd, 0x0, 0x9, 0x1, 0x7, 0x8, 0x6, 0x0, 0xffff45b4, 0x3, 0x0, 0x6, 0x9, 0x1771e9ce, 0x8, 0x8, 0x9, 0xa, 0x8, 0x71a, 0x7f, 0x8, 0x3, 0xffff8000, 0xffff, 0x8, 0x0, 0x7fff, 0x3, 0x7, 0x7, 0x80000001, 0x5, 0x6, 0x8, 0x80000000, 0x5, 0x9, 0xffff, 0xe574, 0x5a5, 0x9a01, 0x9]}, 0x45c) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000030) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) (async) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00', {0x3, 0x2, 0xeb3, 0x6}, 0x2f, [0xdc, 0x7, 0x4000000, 0x2, 0x3, 0x8, 0x18, 0x3, 0x4, 0x1c5, 0x20000000, 0x5, 0x8000, 0xfffffffb, 0xffff, 0x3, 0x7f, 0x8, 0x101, 0x2, 0x3, 0x3ff, 0x4, 0xff, 0x5, 0x7210000, 0xc2a, 0x3, 0x2, 0x8, 0xe9a, 0xe, 0x2, 0x4, 0x7, 0x1, 0x8, 0x4, 0x5, 0x9, 0xf, 0x800, 0x9, 0x54, 0x1, 0xa, 0x80000000, 0xc7ff, 0x1, 0x3, 0x400, 0x9, 0x3, 0x7fffffff, 0x2, 0x3, 0x1000, 0x6, 0x3, 0x1, 0x3, 0x200, 0xe, 0x1], [0x6, 0x9, 0x2, 0xb, 0x2, 0x5, 0x8e63, 0x7, 0x0, 0xfffffffe, 0x578, 0x4, 0x6, 0x2, 0x40, 0x9, 0x8, 0x5f, 0x2, 0xfff, 0xffff19c9, 0x81, 0x3, 0x800, 0x3, 0x0, 0x2, 0x7, 0xf4, 0x9, 0x9e, 0x254, 0x6, 0x1, 0x8001, 0x5, 0x62, 0xe, 0x7fffffff, 0x2a9b, 0x7fffffff, 0x7, 0x0, 0x9, 0x0, 0x502, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x3, 0x2, 0x9, 0x8f6, 0x100, 0x5, 0x5, 0x7, 0x101, 0x8, 0x8, 0x81], [0x5, 0x9, 0x3, 0x10, 0x7fffffff, 0x2, 0x3, 0x4, 0xfffffe01, 0x2, 0x41, 0x5, 0xf, 0xe, 0x9, 0x8a, 0x5, 0x4, 0x7fffffff, 0x9, 0x80000000, 0x7fff, 0x2, 0xaa0, 0x5a, 0x80, 0x4, 0x1, 0x0, 0xffffffff, 0x400, 0x6, 0x1d, 0x80000001, 0x4, 0x4, 0x6, 0xffff, 0xba3a, 0x4, 0x81, 0x1, 0x2, 0x5f0b, 0xa1, 0x4, 0x7, 0x6, 0x1000, 0x6, 0x800, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x3, 0x3, 0x9, 0x1, 0x73, 0x4180000, 0x8], [0x2, 0xd, 0x9, 0x200, 0x7, 0xdb8, 0x4, 0x9, 0x1000, 0x80000001, 0x6, 0x4, 0xfffffff9, 0x8001, 0x2, 0x4, 0x7, 0xffffff15, 0x0, 0x9, 0x8, 0xfffffffd, 0x0, 0x9, 0x1, 0x7, 0x8, 0x6, 0x0, 0xffff45b4, 0x3, 0x0, 0x6, 0x9, 0x1771e9ce, 0x8, 0x8, 0x9, 0xa, 0x8, 0x71a, 0x7f, 0x8, 0x3, 0xffff8000, 0xffff, 0x8, 0x0, 0x7fff, 0x3, 0x7, 0x7, 0x80000001, 0x5, 0x6, 0x8, 0x80000000, 0x5, 0x9, 0xffff, 0xe574, 0x5a5, 0x9a01, 0x9]}, 0x45c) (async) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000030) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.217527][T12411] ? __pfx__printk+0x10/0x10 [ 432.217565][T12411] ? __pfx___might_resched+0x10/0x10 [ 432.217595][T12411] should_fail_ex+0x414/0x560 [ 432.217623][T12411] should_failslab+0xa8/0x100 [ 432.217651][T12411] __kmalloc_noprof+0xcb/0x7f0 [ 432.217672][T12411] ? kfree+0x4d/0x6d0 [ 432.217687][T12411] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 432.217728][T12411] tomoyo_realpath_from_path+0xe3/0x5d0 [ 432.217762][T12411] ? tomoyo_domain+0xd9/0x130 [ 432.217788][T12411] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 432.217815][T12411] tomoyo_path_number_perm+0x1e8/0x5a0 [ 432.217845][T12411] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.217915][T12411] ? __fget_files+0x2a/0x420 [ 432.217949][T12411] ? __fget_files+0x3a0/0x420 [ 432.217974][T12411] ? __fget_files+0x2a/0x420 [ 432.218006][T12411] security_file_ioctl+0xcb/0x2d0 [ 432.218034][T12411] __se_sys_ioctl+0x47/0x170 [ 432.218060][T12411] do_syscall_64+0xfa/0xfa0 [ 432.218088][T12411] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.218117][T12411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.218138][T12411] ? clear_bhb_loop+0x60/0xb0 [ 432.218164][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.218189][T12411] RIP: 0033:0x7f317e18ebe9 [ 432.218220][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.218238][T12411] RSP: 002b:00007f317f070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.218260][T12411] RAX: ffffffffffffffda RBX: 00007f317e3c5fa0 RCX: 00007f317e18ebe9 [ 432.218275][T12411] RDX: 00002000000007c0 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 432.218298][T12411] RBP: 00007f317f070090 R08: 0000000000000000 R09: 0000000000000000 [ 432.218310][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.218323][T12411] R13: 00007f317e3c6038 R14: 00007f317e3c5fa0 R15: 00007ffcd17f6038 [ 432.218358][T12411] [ 432.218367][T12411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.515525][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 432.526109][ T5953] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 432.553077][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.567255][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.675670][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 432.682883][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 432.692145][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.702660][ T9] usb 3-1: config 0 descriptor?? [ 432.705459][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 432.718860][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 432.722334][ T5953] usb 5-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 432.735862][ T5953] usb 5-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 432.745066][ T5953] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 432.754565][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.918120][ T9] gspca_sonixj: reg_r err -32 [ 432.923049][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 432.946750][ T24] usb 3-1: USB disconnect, device number 13 [ 433.005295][T12413] sp0: Synchronizing with TNC [ 433.033650][ T5953] usb 5-1: string descriptor 0 read error: -71 [ 433.072384][ T5953] usb 5-1: Found UVC 0.00 device (2833:0201) [ 433.093725][ T5953] usb 5-1: No valid video chain found. [ 433.113005][ T5953] usb 5-1: USB disconnect, device number 107 [ 433.173317][T12427] netlink: 'syz.5.1838': attribute type 1 has an invalid length. [ 433.189915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.197395][T12427] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1838'. [ 433.213941][T12427] NCSI netlink: No device for ifindex 0 [ 433.222508][T12427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 433.336514][T12412] [U] è [ 433.395930][T12434] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 433.447980][T12443] loop2: detected capacity change from 0 to 7 [ 433.460202][ T5873] Dev loop2: unable to read RDB block 7 [ 433.466606][ T5873] loop2: unable to read partition table [ 433.473240][ T5873] loop2: partition table beyond EOD, truncated [ 433.481492][T12443] Dev loop2: unable to read RDB block 7 [ 433.487826][T12443] loop2: unable to read partition table [ 433.493756][T12443] loop2: partition table beyond EOD, truncated [ 433.504993][T12443] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.344507][ T93] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 434.523385][ T93] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.540240][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.556725][ T93] usb 3-1: Product: syz [ 434.564084][ T93] usb 3-1: Manufacturer: syz [ 434.581132][ T93] usb 3-1: SerialNumber: syz [ 434.611716][ T93] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.612860][T12484] loop2: detected capacity change from 0 to 7 [ 434.628833][T12484] Dev loop2: unable to read RDB block 7 [ 434.634772][T12484] loop2: unable to read partition table [ 434.640856][T12484] loop2: partition table beyond EOD, truncated [ 434.656810][T12484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.659825][ T5912] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 434.836345][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.849059][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.871032][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.902783][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.912375][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.925732][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.032229][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.041458][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.084357][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 435.763860][ T5912] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 435.798265][ T5912] ath9k_htc: Failed to initialize the device [ 435.877512][ T5912] usb 3-1: ath9k_htc: USB layer deinitialized [ 436.313182][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.336791][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.387237][T12547] netlink: 'syz.4.1864': attribute type 2 has an invalid length. [ 436.396912][T12547] netlink: 'syz.4.1864': attribute type 8 has an invalid length. [ 436.404916][T12547] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1864'. [ 436.532967][T12549] fuse: Bad value for 'rootmode' [ 436.926340][T12559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.950018][T12559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.043207][ T93] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 437.107011][T12564] netlink: 'syz.5.1871': attribute type 21 has an invalid length. [ 437.119694][T12564] 9pnet_fd: p9_fd_create_unix (12564): problem connecting socket: ./file0: -111 [ 437.196598][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.204499][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 437.205707][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.216865][ T93] usb 5-1: too many configurations: 238, using maximum allowed: 8 [ 437.225486][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.229858][ T93] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 437.237453][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.250860][ T93] usb 5-1: can't read configurations, error -61 [ 437.385128][ T93] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 437.546096][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 437.554723][ T93] usb 5-1: too many configurations: 238, using maximum allowed: 8 [ 437.565242][ T93] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 437.573107][ T93] usb 5-1: can't read configurations, error -61 [ 437.579779][ T93] usb usb5-port1: attempt power cycle [ 437.590627][T12571] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.597038][T12571] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 437.616935][T12571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.625805][T12571] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 437.644960][T12571] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 437.924984][ T93] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 437.977883][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 437.985024][ T93] usb 5-1: too many configurations: 238, using maximum allowed: 8 [ 438.007426][ T93] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 438.027159][ T93] usb 5-1: can't read configurations, error -61 [ 438.115559][T12588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.124423][T12588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.172921][ T93] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 438.203941][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 438.209807][ T93] usb 5-1: too many configurations: 238, using maximum allowed: 8 [ 438.219534][ T93] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 438.227220][ T93] usb 5-1: can't read configurations, error -61 [ 438.234258][ T93] usb usb5-port1: unable to enumerate USB device [ 438.821033][T12597] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 438.821033][T12597] program syz.5.1882 not setting count and/or reply_len properly [ 438.947787][T12602] netlink: 'syz.5.1883': attribute type 46 has an invalid length. [ 438.958486][T12602] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1883'. [ 439.027048][T12607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.036152][T12607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.277719][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.287516][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.604926][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 439.681864][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 440.038501][T12625] netlink: 'syz.4.1887': attribute type 4 has an invalid length. [ 440.155461][T12644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.166677][T12644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.253693][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.260279][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.399592][T12652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.409135][T12652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.131125][T12680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.148761][T12680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.163081][T12680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.181582][T12680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.412346][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.449453][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.510886][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1899'. [ 441.522046][T12694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1899'. [ 441.680960][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 441.689066][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 441.764428][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.855829][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 441.871147][ T24] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 441.887807][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 441.895730][ T24] usb 5-1: can't read configurations, error -61 [ 442.043866][ T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 442.077508][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.088379][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.109780][T12714] kvm: user requested TSC rate below hardware speed [ 442.123741][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.159322][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.228592][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 442.241592][ T24] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 442.257228][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.266375][ T24] usb 5-1: can't read configurations, error -61 [ 442.285856][ T24] usb usb5-port1: attempt power cycle [ 442.295158][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 442.630325][ T24] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 442.651034][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 442.651798][ T24] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 442.653212][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.653251][ T24] usb 5-1: can't read configurations, error -61 [ 442.790358][ T24] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 442.813055][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 442.813627][ T24] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 442.815397][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.815436][ T24] usb 5-1: can't read configurations, error -61 [ 442.815761][ T24] usb usb5-port1: unable to enumerate USB device [ 443.048166][T12738] tty tty3: ldisc open failed (-12), clearing slot 2 [ 443.080395][T12741] tty tty3: ldisc open failed (-12), clearing slot 2 [ 443.308196][T12747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.316783][T12747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.658228][T12751] veth1_to_bond: entered allmulticast mode [ 443.659424][T12751] veth1_to_bond: left allmulticast mode [ 443.839719][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.272185][T12762] netlink: 'syz.5.1911': attribute type 2 has an invalid length. [ 444.277298][T12762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.277730][T12762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.890699][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 445.892527][ T5869] block nbd5: Receive control failed (result -32) [ 445.894563][T12778] block nbd5: shutting down sockets [ 446.203778][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.235051][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.258989][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.279106][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.517260][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.527405][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.541598][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.553230][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.555695][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.563456][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.581506][T12795] loop8: detected capacity change from 0 to 16 [ 446.588567][ T24] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 446.599646][ T5873] loop8: unable to read partition table [ 446.605611][ T5873] loop8: partition table beyond EOD, truncated [ 446.623836][T12795] loop8: unable to read partition table [ 446.630196][T12795] loop8: partition table beyond EOD, truncated [ 446.636893][T12795] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 446.728393][ T24] usb 5-1: device descriptor read/64, error -71 [ 446.988138][ T24] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 447.148051][ T24] usb 5-1: device descriptor read/64, error -71 [ 447.268824][ T24] usb usb5-port1: attempt power cycle [ 447.637893][ T24] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 447.678816][ T24] usb 5-1: device descriptor read/8, error -71 [ 447.924027][ T24] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 447.937831][T12810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.951653][T12810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.968424][ T24] usb 5-1: device descriptor read/8, error -71 [ 448.079591][ T24] usb usb5-port1: unable to enumerate USB device [ 448.700176][T12825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.700573][T12826] netlink: 'syz.5.1934': attribute type 13 has an invalid length. [ 448.714073][T12825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.273717][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.283271][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.362371][T12836] netlink: 750 bytes leftover after parsing attributes in process `syz.5.1937'. [ 449.379318][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.392520][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.419271][T12836] syzkaller1: entered promiscuous mode [ 449.424836][T12836] syzkaller1: entered allmulticast mode [ 449.437171][ T5186] Bluetooth: hci1: command 0x1003 tx timeout [ 449.453985][ T5869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 449.481439][T12836] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 449.496179][T12836] overlayfs: failed to set xattr on upper [ 449.502912][T12836] overlayfs: ...falling back to redirect_dir=nofollow. [ 449.510112][T12836] overlayfs: ...falling back to index=off. [ 449.515956][T12836] overlayfs: ...falling back to uuid=null. [ 449.558227][T12836] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 449.642730][T12841] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 449.660052][T12841] qnx6: wrong signature (magic) in superblock #1. [ 449.667364][T12841] qnx6: unable to read the first superblock [ 449.683828][T12841] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 449.694684][T12841] qnx6: wrong signature (magic) in superblock #1. [ 449.704742][T12841] qnx6: unable to read the first superblock [ 449.915510][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.925601][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.122765][T12866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1946'. [ 450.150640][T12866] tc_dump_action: action bad kind [ 450.372677][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.383350][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.649408][ T5953] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 450.816264][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 450.822970][ T5953] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 450.831656][ T5953] usb 5-1: config 0 has no interface number 0 [ 450.838069][ T5953] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 450.852502][ T5953] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 450.862260][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.871217][ T5953] usb 5-1: Product: syz [ 450.875811][ T5953] usb 5-1: Manufacturer: syz [ 450.881107][ T5953] usb 5-1: SerialNumber: syz [ 450.891266][ T5953] usb 5-1: config 0 descriptor?? [ 450.903159][ T5953] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 451.302883][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.313178][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.518793][T12876] comedi: No check for data length of config insn id 5007 is implemented [ 451.530710][T12876] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 451.542398][T12876] comedi: Assuming n=15 is correct [ 451.658410][T12911] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 451.665000][T12911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.675867][T12911] vhci_hcd vhci_hcd.0: Device attached [ 451.685142][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.696678][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.705604][T12912] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 451.710488][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.720864][ T3467] vhci_hcd: stop threads [ 451.722521][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.725416][ T3467] vhci_hcd: release socket [ 451.740798][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.744949][ T3467] vhci_hcd: disconnect device [ 451.752944][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.760369][ T5953] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 451.779048][ T5953] videodev: could not get a free minor [ 451.784674][ T5953] gspca_main: video_register_device err -23 [ 451.798502][ T5953] gspca_pac7302 5-1:0.172: probe with driver gspca_pac7302 failed with error -23 [ 452.053699][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.074675][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.212143][ T5912] usb 5-1: USB disconnect, device number 120 [ 452.453879][T12926] atomic_op ffff8880275b1998 conn xmit_atomic 0000000000000000 [ 452.474362][T12926] loop9: detected capacity change from 0 to 8 [ 452.496700][ T5873] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 452.502213][ T5873] loop9: partition table partially beyond EOD, truncated [ 452.522941][ T5873] loop9: p1 size 81768186 extends beyond EOD, truncated [ 452.584200][T12926] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 452.597139][T12926] loop9: partition table partially beyond EOD, truncated [ 452.615097][T12926] loop9: p1 size 81768186 extends beyond EOD, truncated [ 452.751137][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1971'. [ 452.905344][T12938] block nbd4: Attempted send on invalid socket [ 452.944848][T12938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.976183][T12938] hpfs: hpfs_map_sector(): read error [ 453.093936][T12946] program syz.7.1974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.261129][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.302284][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.534327][T12962] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1980'. [ 453.565876][ T5953] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 453.654975][T12962] syz.5.1980 (12962) used greatest stack depth: 17832 bytes left [ 453.694802][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.710797][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.752243][ T5953] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 453.761531][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.770757][ T5953] usb 5-1: Product: syz [ 453.775093][ T5953] usb 5-1: Manufacturer: syz [ 453.780015][ T5953] usb 5-1: SerialNumber: syz [ 453.905393][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.916395][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.205436][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.216781][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.230889][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 454.246008][ T5953] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 454.259776][ T5953] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 454.276503][ T5953] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 454.299838][ T5953] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 454.323177][T12972] tmpfs: Bad value for 'mpol' [ 454.387233][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.401843][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.110910][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.124885][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.246873][ T5967] usb 5-1: USB disconnect, device number 121 [ 456.414514][T13002] netlink: 'syz.5.1995': attribute type 4 has an invalid length. [ 456.424097][T13002] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1995'. [ 456.549755][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.561212][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.646421][ T5967] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 456.815877][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 456.824607][ T5967] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 456.835896][ T5967] usb 5-1: config 0 has no interface number 0 [ 456.851212][ T5967] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 456.862795][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.873225][ T5967] usb 5-1: Product: syz [ 456.879529][ T5967] usb 5-1: Manufacturer: syz [ 456.884485][ T5967] usb 5-1: SerialNumber: syz [ 456.893909][ T5967] usb 5-1: config 0 descriptor?? [ 456.929151][ T5967] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.157020][ T5967] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 457.192620][ T5967] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 457.214510][T13015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2000'. [ 457.386492][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 457.394718][ T5967] usb 5-1: USB disconnect, device number 122 [ 457.431499][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.458025][ T5967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 457.472257][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.488242][ T5967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 457.500686][ T5967] quatech2 5-1:0.51: device disconnected [ 457.865024][T13019] support for cryptoloop has been removed. Use dm-crypt instead. [ 458.118815][T13021] sp0: Synchronizing with TNC [ 458.279437][T13026] loop2: detected capacity change from 0 to 7 [ 458.351814][ T5873] Dev loop2: unable to read RDB block 7 [ 458.363642][ T5873] loop2: unable to read partition table [ 458.375692][ T5873] loop2: partition table beyond EOD, truncated [ 458.394866][T13026] Dev loop2: unable to read RDB block 7 [ 458.404265][T13026] loop2: unable to read partition table [ 458.435505][T13026] loop2: partition table beyond EOD, truncated [ 458.448325][T13026] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.488634][T13028] sctp: [Deprecated]: syz.4.2006 (pid 13028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.488634][T13028] Use struct sctp_sack_info instead [ 458.750370][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.761429][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.035200][T13039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2010'. [ 459.893761][T13062] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2016'. [ 459.963453][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.005503][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.019893][T13065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.033020][T13065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.101247][T13069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.116789][T13069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.139833][T13069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.153017][T13069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.652303][ T5967] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 460.670390][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.679295][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.836110][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 460.845446][ T5967] usb 5-1: unable to get BOS descriptor or descriptor too short [ 460.859721][ T5967] usb 5-1: config 4 has an invalid interface number: 101 but max is 0 [ 460.875895][ T5967] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 460.893717][ T5967] usb 5-1: config 4 has no interface number 0 [ 460.901388][ T5967] usb 5-1: config 4 interface 101 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 460.910150][T13083] input: syz0 as /devices/virtual/input/input54 [ 460.915918][ T5967] usb 5-1: config 4 interface 101 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0 [ 460.934032][ T5967] usb 5-1: config 4 interface 101 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.951043][ T5967] usb 5-1: config 4 interface 101 has no altsetting 0 [ 460.962847][ T5967] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52 [ 460.973164][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.982165][ T5967] usb 5-1: Product: syz [ 460.986632][ T5967] usb 5-1: Manufacturer: syz [ 460.991883][ T5967] usb 5-1: SerialNumber: syz [ 461.102584][T13088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2026'. [ 461.113201][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2026'. [ 461.124456][T13088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2026'. [ 461.133837][T13088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2026'. [ 461.306834][T13090] ªªªªªª: renamed from wg2 [ 461.313579][ T5967] ttusbir 5-1:4.101: cannot find expected altsetting [ 461.355573][ T5967] usb 5-1: USB disconnect, device number 123 [ 461.490526][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.495582][T13097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2029'. [ 461.617229][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.802042][T13099] loop2: detected capacity change from 0 to 7 [ 461.810237][T13099] Dev loop2: unable to read RDB block 7 [ 461.817967][T13099] loop2: unable to read partition table [ 461.852011][T13099] loop2: partition table beyond EOD, truncated [ 461.875273][T13099] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 462.145856][ T5967] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 462.270961][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.273050][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.365872][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 462.373721][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 462.373775][ T5967] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 462.373802][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.376780][ T5967] usb 5-1: config 0 descriptor?? [ 462.600547][T13101] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 462.600610][T13101] Error validating options; rc = [-22] [ 463.331206][T13117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 463.582069][T13124] dns_resolver: Unsupported server list version (122) [ 463.594569][T13124] trusted_key: encrypted_key: insufficient parameters specified [ 463.619538][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.639600][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.851514][T13133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.864704][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.877210][T13133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.889299][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.428203][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 464.437953][T13143] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2044'. [ 464.449871][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 464.786130][T13157] loop2: detected capacity change from 0 to 7 [ 464.799666][ T5873] Dev loop2: unable to read RDB block 7 [ 464.805446][ T5873] loop2: unable to read partition table [ 464.814528][ T5873] loop2: partition table beyond EOD, truncated [ 464.822736][T13157] Dev loop2: unable to read RDB block 7 [ 464.831900][T13157] loop2: unable to read partition table [ 464.838197][T13157] loop2: partition table beyond EOD, truncated [ 464.846060][T13157] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 464.929148][ T5967] usbhid 5-1:0.0: can't add hid device: -71 [ 464.947725][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 465.001727][ T5967] usb 5-1: USB disconnect, device number 124 [ 465.055240][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.089754][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.130558][T13163] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 465.212198][T13163] gfs2: error -5 reading superblock [ 465.329762][T13171] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2055'. [ 465.481992][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.491799][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.506853][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.517757][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.526244][ T5967] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 465.679571][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 465.687692][ T5967] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 465.695917][ T5967] usb 5-1: config 0 has no interface number 0 [ 465.702324][ T5967] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 465.711497][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.722203][ T5967] usb 5-1: config 0 descriptor?? [ 465.738158][ T5967] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 465.843204][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.852296][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.862127][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.870916][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.933438][T13166] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 465.941897][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 465.972714][ T5953] usb 5-1: USB disconnect, device number 125 [ 466.133072][T13185] loop2: detected capacity change from 0 to 7 [ 466.141244][T13185] Dev loop2: unable to read RDB block 7 [ 466.148395][T13185] loop2: unable to read partition table [ 466.154236][T13185] loop2: partition table beyond EOD, truncated [ 466.160941][T13185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.243274][T13187] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2061'. [ 466.439936][T13195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.450979][T13195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.468152][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.477315][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.835824][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 466.965969][ T9] usb 5-1: device descriptor read/64, error -71 [ 467.038508][T13206] loop2: detected capacity change from 0 to 7 [ 467.046596][T13206] Dev loop2: unable to read RDB block 7 [ 467.052644][T13206] loop2: unable to read partition table [ 467.059040][T13206] loop2: partition table beyond EOD, truncated [ 467.065506][T13206] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 467.206509][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 467.211956][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.224223][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.346780][ T9] usb 5-1: device descriptor read/64, error -71 [ 467.459488][ T9] usb usb5-port1: attempt power cycle [ 467.806827][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 467.852231][ T9] usb 5-1: device descriptor read/8, error -71 [ 468.106196][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 468.114623][T13224] syz.5.2073 uses old SIOCAX25GETINFO [ 468.138788][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.148196][ T9] usb 5-1: device descriptor read/8, error -71 [ 468.155502][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.171085][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.180382][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.268341][ T9] usb usb5-port1: unable to enumerate USB device [ 468.743728][T13228] 9pnet_fd: Insufficient options for proto=fd [ 468.827103][T13230] loop2: detected capacity change from 0 to 7 [ 468.835339][T13230] Dev loop2: unable to read RDB block 7 [ 468.842927][T13230] loop2: unable to read partition table [ 468.849214][T13230] loop2: partition table beyond EOD, truncated [ 468.855435][T13230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.884563][ T5236] Dev loop2: unable to read RDB block 7 [ 468.891784][ T5236] loop2: unable to read partition table [ 468.900235][ T5236] loop2: partition table beyond EOD, truncated [ 469.485638][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2084'. [ 469.501229][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2084'. [ 469.617474][T13253] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2085'. [ 469.683556][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2085'. [ 469.924409][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.928682][T13263] bpf: Bad value for 'uid' [ 469.935241][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.016689][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.026919][ T5912] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 470.027942][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.176095][ T5912] usb 5-1: device descriptor read/64, error -71 [ 470.416540][ T5912] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 470.556002][ T5912] usb 5-1: device descriptor read/64, error -71 [ 470.594734][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.604659][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.617621][T13270] netlink: 14597 bytes leftover after parsing attributes in process `syz.2.2091'. [ 470.686408][ T5912] usb usb5-port1: attempt power cycle [ 470.743987][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.754000][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.026049][ T5912] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 471.046748][ T5912] usb 5-1: device descriptor read/8, error -71 [ 471.267783][T13278] netlink: 'syz.2.2094': attribute type 21 has an invalid length. [ 471.286543][ T5912] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 471.328803][ T5912] usb 5-1: device descriptor read/8, error -71 [ 471.458716][ T5912] usb usb5-port1: unable to enumerate USB device [ 471.503440][T13286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.530936][T13286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.752255][T13302] netlink: 'syz.4.2102': attribute type 21 has an invalid length. [ 472.761345][T13302] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2102'. [ 473.106453][ T5967] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 473.201881][T13312] loop2: detected capacity change from 0 to 7 [ 473.210128][T13312] Dev loop2: unable to read RDB block 7 [ 473.216248][T13312] loop2: unable to read partition table [ 473.222165][T13312] loop2: partition table beyond EOD, truncated [ 473.230084][T13312] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.289249][ T5967] usb 5-1: device descriptor read/64, error -71 [ 473.538669][ T5967] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 473.686026][ T5967] usb 5-1: device descriptor read/64, error -71 [ 473.809512][ T5967] usb usb5-port1: attempt power cycle [ 473.827188][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.866811][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.894352][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.910347][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.188166][ T5967] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 474.216535][ T5967] usb 5-1: device descriptor read/8, error -71 [ 474.456781][ T5967] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 474.499902][ T5967] usb 5-1: device descriptor read/8, error -71 [ 474.573755][T13335] loop2: detected capacity change from 0 to 7 [ 474.583345][ T5873] Dev loop2: unable to read RDB block 7 [ 474.589238][ T5873] loop2: unable to read partition table [ 474.595537][ T5873] loop2: partition table beyond EOD, truncated [ 474.604954][T13335] Dev loop2: unable to read RDB block 7 [ 474.611254][T13335] loop2: unable to read partition table [ 474.616538][ T5967] usb usb5-port1: unable to enumerate USB device [ 474.617805][T13335] loop2: partition table beyond EOD, truncated [ 474.630359][T13335] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 474.795605][T13341] FAULT_INJECTION: forcing a failure. [ 474.795605][T13341] name failslab, interval 1, probability 0, space 0, times 0 [ 474.808472][T13341] CPU: 1 UID: 0 PID: 13341 Comm: syz.2.2116 Not tainted syzkaller #0 PREEMPT(full) [ 474.808500][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.808515][T13341] Call Trace: [ 474.808523][T13341] [ 474.808533][T13341] dump_stack_lvl+0x189/0x250 [ 474.808570][T13341] ? __pfx____ratelimit+0x10/0x10 [ 474.808592][T13341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.808615][T13341] ? __pfx__printk+0x10/0x10 [ 474.808641][T13341] ? __pfx___might_resched+0x10/0x10 [ 474.808664][T13341] ? fs_reclaim_acquire+0x7d/0x100 [ 474.808685][T13341] should_fail_ex+0x414/0x560 [ 474.808705][T13341] should_failslab+0xa8/0x100 [ 474.808725][T13341] __kmalloc_noprof+0xcb/0x7f0 [ 474.808740][T13341] ? tomoyo_encode+0x28b/0x550 [ 474.808767][T13341] tomoyo_encode+0x28b/0x550 [ 474.808793][T13341] tomoyo_realpath_from_path+0x58d/0x5d0 [ 474.808824][T13341] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 474.808843][T13341] tomoyo_path_number_perm+0x1e8/0x5a0 [ 474.808865][T13341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.808912][T13341] ? __fget_files+0x2a/0x420 [ 474.808935][T13341] ? __fget_files+0x3a0/0x420 [ 474.808953][T13341] ? __fget_files+0x2a/0x420 [ 474.808975][T13341] security_file_ioctl+0xcb/0x2d0 [ 474.808995][T13341] __se_sys_ioctl+0x47/0x170 [ 474.809012][T13341] do_syscall_64+0xfa/0xfa0 [ 474.809032][T13341] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.809053][T13341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.809067][T13341] ? clear_bhb_loop+0x60/0xb0 [ 474.809086][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.809100][T13341] RIP: 0033:0x7fd2d2f8ebe9 [ 474.809114][T13341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.809127][T13341] RSP: 002b:00007fd2d11f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.809144][T13341] RAX: ffffffffffffffda RBX: 00007fd2d31c5fa0 RCX: 00007fd2d2f8ebe9 [ 474.809156][T13341] RDX: 0000200000000100 RSI: 00000000000007a5 RDI: 0000000000000003 [ 474.809165][T13341] RBP: 00007fd2d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.809175][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.809184][T13341] R13: 00007fd2d31c6038 R14: 00007fd2d31c5fa0 R15: 00007fff46a868c8 [ 474.809214][T13341] [ 474.809232][T13341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.150979][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.162948][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.206731][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.220024][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.554518][T13360] loop2: detected capacity change from 0 to 7 [ 475.569734][ T5873] Dev loop2: unable to read RDB block 7 [ 475.576618][ T5873] loop2: unable to read partition table [ 475.582515][ T5873] loop2: partition table beyond EOD, truncated [ 475.592397][T13360] Dev loop2: unable to read RDB block 7 [ 475.598281][T13360] loop2: unable to read partition table [ 475.604175][T13360] loop2: partition table beyond EOD, truncated [ 475.610604][T13360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.693749][T13362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.703445][T13362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.973976][T13371] FAULT_INJECTION: forcing a failure. [ 475.973976][T13371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.998183][T13371] CPU: 1 UID: 0 PID: 13371 Comm: syz.5.2127 Not tainted syzkaller #0 PREEMPT(full) [ 475.998222][T13371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.998236][T13371] Call Trace: [ 475.998245][T13371] [ 475.998256][T13371] dump_stack_lvl+0x189/0x250 [ 475.998293][T13371] ? __pfx____ratelimit+0x10/0x10 [ 475.998322][T13371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.998353][T13371] ? __pfx__printk+0x10/0x10 [ 475.998384][T13371] ? __might_fault+0xb0/0x130 [ 475.998418][T13371] should_fail_ex+0x414/0x560 [ 475.998447][T13371] _copy_from_user+0x2d/0xb0 [ 475.998479][T13371] vmci_host_unlocked_ioctl+0xa98/0x2650 [ 475.998509][T13371] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 475.998557][T13371] ? kasan_quarantine_put+0xdd/0x220 [ 475.998578][T13371] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.998616][T13371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 475.998648][T13371] ? do_vfs_ioctl+0xbe8/0x1430 [ 475.998668][T13371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 475.998696][T13371] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 475.998758][T13371] ? __fget_files+0x2a/0x420 [ 475.998790][T13371] ? __fget_files+0x3a0/0x420 [ 475.998816][T13371] ? __fget_files+0x2a/0x420 [ 475.998847][T13371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 475.998879][T13371] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 475.998902][T13371] __se_sys_ioctl+0xfc/0x170 [ 475.998926][T13371] do_syscall_64+0xfa/0xfa0 [ 475.998954][T13371] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.998983][T13371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.999003][T13371] ? clear_bhb_loop+0x60/0xb0 [ 475.999028][T13371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.999049][T13371] RIP: 0033:0x7f317e18ebe9 [ 475.999068][T13371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.999087][T13371] RSP: 002b:00007f317f070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.999110][T13371] RAX: ffffffffffffffda RBX: 00007f317e3c5fa0 RCX: 00007f317e18ebe9 [ 475.999125][T13371] RDX: 0000200000000100 RSI: 00000000000007a5 RDI: 0000000000000003 [ 475.999139][T13371] RBP: 00007f317f070090 R08: 0000000000000000 R09: 0000000000000000 [ 475.999153][T13371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.999165][T13371] R13: 00007f317e3c6038 R14: 00007f317e3c5fa0 R15: 00007ffcd17f6038 [ 475.999200][T13371] [ 476.290768][T13376] can0: slcan on ttyprintk. [ 476.361740][T13376] can0 (unregistered): slcan off ttyprintk. [ 476.486851][T13385] netlink: 'syz.2.2132': attribute type 21 has an invalid length. [ 476.494783][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 476.619481][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.629518][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.639613][T13390] netlink: 'syz.5.2134': attribute type 3 has an invalid length. [ 476.648751][T13390] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2134'. [ 476.661034][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.671941][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.681723][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.693356][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.703000][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.713484][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.723033][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.734438][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.744018][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.753057][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.855949][ T5967] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 477.009827][ T5967] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 477.020090][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.028255][ T5967] usb 5-1: Product: syz [ 477.032470][ T5967] usb 5-1: Manufacturer: syz [ 477.038345][ T5967] usb 5-1: SerialNumber: syz [ 477.045113][ T5967] usb 5-1: config 0 descriptor?? [ 477.057957][ T5967] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 477.258921][ T5967] (null): failure reading functionality [ 477.358233][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.374843][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.400817][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.416863][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.459224][ T5967] i2c i2c-3: failure reading functionality [ 477.483639][ T5967] i2c i2c-3: connected i2c-tiny-usb device [ 477.500801][ T5967] usb 5-1: USB disconnect, device number 12 [ 477.567257][T13402] FAULT_INJECTION: forcing a failure. [ 477.567257][T13402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.595261][T13402] CPU: 1 UID: 0 PID: 13402 Comm: syz.7.2139 Not tainted syzkaller #0 PREEMPT(full) [ 477.595290][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.595303][T13402] Call Trace: [ 477.595312][T13402] [ 477.595321][T13402] dump_stack_lvl+0x189/0x250 [ 477.595357][T13402] ? __pfx____ratelimit+0x10/0x10 [ 477.595385][T13402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.595417][T13402] ? __pfx__printk+0x10/0x10 [ 477.595461][T13402] should_fail_ex+0x414/0x560 [ 477.595489][T13402] _copy_to_user+0x31/0xb0 [ 477.595524][T13402] vmci_host_unlocked_ioctl+0x1d2a/0x2650 [ 477.595553][T13402] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 477.595600][T13402] ? kasan_quarantine_put+0xdd/0x220 [ 477.595622][T13402] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.595661][T13402] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 477.595692][T13402] ? do_vfs_ioctl+0xbe8/0x1430 [ 477.595718][T13402] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 477.595743][T13402] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 477.595805][T13402] ? __fget_files+0x2a/0x420 [ 477.595836][T13402] ? __fget_files+0x3a0/0x420 [ 477.595862][T13402] ? __fget_files+0x2a/0x420 [ 477.595901][T13402] ? bpf_lsm_file_ioctl+0x9/0x20 [ 477.595932][T13402] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 477.595954][T13402] __se_sys_ioctl+0xfc/0x170 [ 477.595979][T13402] do_syscall_64+0xfa/0xfa0 [ 477.596006][T13402] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.596035][T13402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.596056][T13402] ? clear_bhb_loop+0x60/0xb0 [ 477.596081][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.596102][T13402] RIP: 0033:0x7fe7fd78ebe9 [ 477.596121][T13402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.596140][T13402] RSP: 002b:00007fe7fe640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.596163][T13402] RAX: ffffffffffffffda RBX: 00007fe7fd9c5fa0 RCX: 00007fe7fd78ebe9 [ 477.596178][T13402] RDX: 0000200000000100 RSI: 00000000000007a5 RDI: 0000000000000003 [ 477.596192][T13402] RBP: 00007fe7fe640090 R08: 0000000000000000 R09: 0000000000000000 [ 477.596205][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.596218][T13402] R13: 00007fe7fd9c6038 R14: 00007fe7fd9c5fa0 R15: 00007ffd1bf7d3b8 [ 477.596251][T13402] [ 477.901116][T13406] loop2: detected capacity change from 0 to 7 [ 477.909367][T13406] Dev loop2: unable to read RDB block 7 [ 477.915095][T13406] loop2: unable to read partition table [ 477.923406][T13406] loop2: partition table beyond EOD, truncated [ 477.930167][T13406] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.536528][T13429] FAULT_INJECTION: forcing a failure. [ 478.536528][T13429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.552391][T13429] CPU: 1 UID: 0 PID: 13429 Comm: syz.5.2148 Not tainted syzkaller #0 PREEMPT(full) [ 478.552419][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.552433][T13429] Call Trace: [ 478.552441][T13429] [ 478.552450][T13429] dump_stack_lvl+0x189/0x250 [ 478.552486][T13429] ? __pfx____ratelimit+0x10/0x10 [ 478.552515][T13429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.552547][T13429] ? __pfx__printk+0x10/0x10 [ 478.552590][T13429] should_fail_ex+0x414/0x560 [ 478.552619][T13429] _copy_to_user+0x31/0xb0 [ 478.552657][T13429] simple_read_from_buffer+0xe1/0x170 [ 478.552701][T13429] proc_fail_nth_read+0x1b3/0x220 [ 478.552738][T13429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.552773][T13429] ? rw_verify_area+0x2a6/0x4d0 [ 478.552795][T13429] ? __lock_acquire+0xab9/0xd20 [ 478.552815][T13429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.552849][T13429] vfs_read+0x200/0xa30 [ 478.552872][T13429] ? fdget_pos+0x247/0x320 [ 478.552903][T13429] ? __pfx___mutex_lock+0x10/0x10 [ 478.552935][T13429] ? __pfx_vfs_read+0x10/0x10 [ 478.552960][T13429] ? __fget_files+0x2a/0x420 [ 478.552992][T13429] ? __fget_files+0x3a0/0x420 [ 478.553018][T13429] ? __fget_files+0x2a/0x420 [ 478.553055][T13429] ksys_read+0x145/0x250 [ 478.553078][T13429] ? __fget_files+0x2a/0x420 [ 478.553106][T13429] ? __pfx_ksys_read+0x10/0x10 [ 478.553134][T13429] ? do_syscall_64+0xbe/0xfa0 [ 478.553167][T13429] do_syscall_64+0xfa/0xfa0 [ 478.553194][T13429] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.553222][T13429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.553241][T13429] ? clear_bhb_loop+0x60/0xb0 [ 478.553267][T13429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.553285][T13429] RIP: 0033:0x7f317e18d5fc [ 478.553304][T13429] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.553321][T13429] RSP: 002b:00007f317f070030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.553343][T13429] RAX: ffffffffffffffda RBX: 00007f317e3c5fa0 RCX: 00007f317e18d5fc [ 478.553358][T13429] RDX: 000000000000000f RSI: 00007f317f0700a0 RDI: 0000000000000004 [ 478.553371][T13429] RBP: 00007f317f070090 R08: 0000000000000000 R09: 0000000000000000 [ 478.553384][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.553396][T13429] R13: 00007f317e3c6038 R14: 00007f317e3c5fa0 R15: 00007ffcd17f6038 [ 478.553430][T13429] [ 478.555195][T13428] loop2: detected capacity change from 0 to 7 [ 478.895180][T13428] Dev loop2: unable to read RDB block 7 [ 478.901439][T13428] loop2: unable to read partition table [ 478.909538][T13428] loop2: partition table beyond EOD, truncated [ 478.913850][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.919667][T13428] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.924925][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.954174][T13437] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2151'. [ 479.150017][T13441] loop2: detected capacity change from 0 to 7 [ 479.160831][T13441] Dev loop2: unable to read RDB block 7 [ 479.167817][T13441] loop2: unable to read partition table [ 479.173740][T13441] loop2: partition table beyond EOD, truncated [ 479.188487][T13441] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.504400][T13456] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 479.504455][T13456] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 479.504538][T13456] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 479.705466][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.707632][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.714437][T13459] loop2: detected capacity change from 0 to 7 [ 479.717265][T13459] Dev loop2: unable to read RDB block 7 [ 479.717314][T13459] loop2: unable to read partition table [ 479.717530][T13459] loop2: partition table beyond EOD, truncated [ 479.717554][T13459] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.102175][T13472] loop2: detected capacity change from 0 to 7 [ 480.104021][ T5873] Dev loop2: unable to read RDB block 7 [ 480.104065][ T5873] loop2: unable to read partition table [ 480.104367][ T5873] loop2: partition table beyond EOD, truncated [ 480.107852][T13472] Dev loop2: unable to read RDB block 7 [ 480.107899][T13472] loop2: unable to read partition table [ 480.108112][T13472] loop2: partition table beyond EOD, truncated [ 480.108135][T13472] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.307572][T13475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.308011][T13475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.499897][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'. [ 480.573685][T13482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.574094][T13482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.143922][T13487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.157233][T13487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.325894][ T5912] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 481.475793][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 481.482831][ T5912] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 481.492031][ T5912] usb 5-1: config 0 has no interface number 0 [ 481.500199][ T5912] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 481.509357][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.517425][ T5912] usb 5-1: Product: syz [ 481.521602][ T5912] usb 5-1: Manufacturer: syz [ 481.526306][ T5912] usb 5-1: SerialNumber: syz [ 481.533992][ T5912] usb 5-1: config 0 descriptor?? [ 481.542521][ T5912] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 481.550677][ T5912] pctv452e: pctv452e_power_ctrl: 1 [ 481.550677][ T5912] [ 481.558472][ T5912] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 481.558472][ T5912] [ 481.569869][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 481.579945][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 481.590513][ T5912] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 481.599115][ T5912] usb 5-1: media controller created [ 481.604878][ T5912] dvb-usb: bulk message failed: -22 (8/0) [ 481.611013][ T5912] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 481.619545][ T5912] dvb-usb: MAC address reading failed. [ 481.640335][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.693069][ T5912] DVB: Unable to find symbol stb0899_attach() [ 481.699286][ T5912] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 481.761323][T13491] binder: 13489:13491 ioctl 40046210 0 returned -14 [ 481.806126][ T5912] rc_core: IR keymap rc-tt-1500 not found [ 481.827960][ T5912] Registered IR keymap rc-empty [ 481.834257][ T5912] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 481.851465][ T5912] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input56 [ 481.864529][ T5912] dvb-usb: schedule remote query interval to 100 msecs. [ 481.871655][ T5912] pctv452e: pctv452e_power_ctrl: 0 [ 481.871655][ T5912] [ 481.880046][ T5912] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 481.911563][ T5912] usb 5-1: USB disconnect, device number 13 [ 481.944224][T13495] loop2: detected capacity change from 0 to 7 [ 481.962291][ T6457] Dev loop2: unable to read RDB block 7 [ 481.970370][ T6457] loop2: unable to read partition table [ 481.978929][ T6457] loop2: partition table beyond EOD, truncated [ 481.995384][T13495] Dev loop2: unable to read RDB block 7 [ 482.004835][T13495] loop2: unable to read partition table [ 482.018737][T13495] loop2: partition table beyond EOD, truncated [ 482.020580][ T5912] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 482.025071][T13495] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.141570][T13497] fuse: Unknown parameter '' [ 482.276914][T13501] netlink: 'syz.2.2176': attribute type 83 has an invalid length. [ 483.593565][T13520] loop2: detected capacity change from 0 to 7 [ 483.598530][T13520] Dev loop2: unable to read RDB block 7 [ 483.598574][T13520] loop2: unable to read partition table [ 483.598803][T13520] loop2: partition table beyond EOD, truncated [ 483.598824][T13520] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.854568][T13528] loop2: detected capacity change from 0 to 7 [ 483.857612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 483.857836][ T5873] Dev loop2: unable to read RDB block 7 [ 483.857880][ T5873] loop2: unable to read partition table [ 483.858115][ T5873] loop2: partition table beyond EOD, truncated [ 483.860082][T13528] Dev loop2: unable to read RDB block 7 [ 483.860127][T13528] loop2: unable to read partition table [ 483.860330][T13528] loop2: partition table beyond EOD, truncated [ 483.860351][T13528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.906240][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 484.068141][ T24] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 484.102230][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 484.102263][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.124915][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 484.176414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 484.224652][T13530] netlink: 'syz.7.2188': attribute type 1 has an invalid length. [ 484.224702][T13530] netlink: 'syz.7.2188': attribute type 2 has an invalid length. [ 484.224719][T13530] netlink: 'syz.7.2188': attribute type 2 has an invalid length. [ 484.224734][T13530] netlink: 'syz.7.2188': attribute type 1 has an invalid length. [ 484.224750][T13530] netlink: 'syz.7.2188': attribute type 2 has an invalid length. [ 484.224764][T13530] netlink: 'syz.7.2188': attribute type 1 has an invalid length. [ 484.421234][T13535] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 484.421266][T13535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 484.423065][T13535] vhci_hcd vhci_hcd.0: Device attached [ 484.423634][T13536] vhci_hcd: connection closed [ 484.425514][ T35] vhci_hcd: stop threads [ 484.425536][ T35] vhci_hcd: release socket [ 484.425553][ T35] vhci_hcd: disconnect device [ 484.675235][ T5967] hid (null): unknown global tag 0xc [ 484.681116][ T5967] hid (null): invalid report_size 65309 [ 484.697745][ T5967] hid-generic 00A0:0008:0003.002D: unknown global tag 0xc [ 484.704912][ T5967] hid-generic 00A0:0008:0003.002D: item 0 4 1 12 parsing failed [ 484.714842][ T5967] hid-generic 00A0:0008:0003.002D: probe with driver hid-generic failed with error -22 [ 484.862100][T13546] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2193'. [ 484.873237][T13546] hsr_slave_0: left promiscuous mode [ 484.884695][T13546] hsr_slave_1: left promiscuous mode [ 484.998194][T13548] loop2: detected capacity change from 0 to 7 [ 485.007059][T13548] Dev loop2: unable to read RDB block 7 [ 485.018765][T13548] loop2: unable to read partition table [ 485.024661][T13548] loop2: partition table beyond EOD, truncated [ 485.056890][T13548] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.155561][T13552] loop2: detected capacity change from 0 to 7 [ 485.164025][T13552] Dev loop2: unable to read RDB block 7 [ 485.175508][T13552] loop2: unable to read partition table [ 485.181889][T13552] loop2: partition table beyond EOD, truncated [ 485.191518][T13552] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.210247][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 485.230520][ T24] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 485.244063][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 485.260924][T13556] 9pnet_fd: Insufficient options for proto=fd [ 485.268303][ T24] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 485.296612][ T24] usb 5-1: USB disconnect, device number 14 [ 485.549434][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.559951][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.755863][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 485.905808][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 485.912620][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.922777][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.933743][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.942976][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.951046][ T24] usb 5-1: Product: syz [ 485.955241][ T24] usb 5-1: Manufacturer: syz [ 485.959884][ T24] usb 5-1: SerialNumber: syz [ 486.176875][ T24] usb 5-1: 0:2 : does not exist [ 486.198566][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 486.252763][ T24] usb 5-1: USB disconnect, device number 15 [ 486.304878][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.634176][T13588] loop2: detected capacity change from 0 to 7 [ 486.647644][T13588] Dev loop2: unable to read RDB block 7 [ 486.647692][T13588] loop2: unable to read partition table [ 486.647909][T13588] loop2: partition table beyond EOD, truncated [ 486.668947][T13588] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 486.873931][T13594] loop2: detected capacity change from 0 to 7 [ 486.886473][T13594] Dev loop2: unable to read RDB block 7 [ 486.892177][T13594] loop2: unable to read partition table [ 486.898866][T13594] loop2: partition table beyond EOD, truncated [ 486.916252][T13594] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 486.963102][ T5236] Dev loop2: unable to read RDB block 7 [ 486.972395][ T5236] loop2: unable to read partition table [ 486.979586][ T5236] loop2: partition table beyond EOD, truncated [ 487.284191][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.300599][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.313468][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.330761][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.344009][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.361082][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.374116][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.391736][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.410679][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.420853][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.438100][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.449270][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.063468][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.068832][T13621] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 488.072639][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.100292][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.110961][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.126743][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 488.138996][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.174982][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.397093][ T5967] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 488.558625][ T5967] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.572292][ T5967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.585427][ T5967] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.602443][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.612373][ T5967] usb 5-1: Product: syz [ 488.619907][ T5967] usb 5-1: Manufacturer: syz [ 488.624807][ T5967] usb 5-1: SerialNumber: syz [ 488.803157][T13650] loop2: detected capacity change from 0 to 7 [ 488.813057][T13650] Dev loop2: unable to read RDB block 7 [ 488.821860][T13650] loop2: unable to read partition table [ 488.832556][T13650] loop2: partition table beyond EOD, truncated [ 488.840549][T13650] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 488.987996][T13655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.000306][T13655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.583052][ T5967] usb 5-1: 0:2 : does not exist [ 489.594491][ T5967] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 489.645313][ T5967] usb 5-1: USB disconnect, device number 16 [ 489.711981][T13672] syzkaller1: entered promiscuous mode [ 489.713111][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.725476][T13672] syzkaller1: entered allmulticast mode [ 489.897889][T13677] Invalid ELF header magic: != ELF [ 489.905330][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.914879][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.963378][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.973966][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.393667][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 490.454975][T13693] loop2: detected capacity change from 0 to 7 [ 490.464024][ T5873] Dev loop2: unable to read RDB block 7 [ 490.472448][ T5873] loop2: unable to read partition table [ 490.478823][ T5873] loop2: partition table beyond EOD, truncated [ 490.490633][T13693] Dev loop2: unable to read RDB block 7 [ 490.497569][T13693] loop2: unable to read partition table [ 490.503454][T13693] loop2: partition table beyond EOD, truncated [ 490.512567][T13693] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 490.581046][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 490.621465][T13695] veth1_macvtap: left promiscuous mode [ 490.757271][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 490.767745][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 490.935877][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 491.004620][T13714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.015688][T13714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.076907][ T24] usb 5-1: device descriptor read/64, error -71 [ 491.222462][T13724] netlink: 'syz.5.2235': attribute type 10 has an invalid length. [ 491.240449][T13724] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 491.301004][T13727] loop2: detected capacity change from 0 to 7 [ 491.311671][ T5873] Dev loop2: unable to read RDB block 7 [ 491.316386][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 491.318479][ T5873] loop2: unable to read partition table [ 491.331674][ T5873] loop2: partition table beyond EOD, truncated [ 491.339025][T13727] Dev loop2: unable to read RDB block 7 [ 491.345140][T13727] loop2: unable to read partition table [ 491.351343][T13727] loop2: partition table beyond EOD, truncated [ 491.359370][T13727] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.450223][T13729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.456589][ T24] usb 5-1: device descriptor read/64, error -71 [ 491.461544][T13729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.480203][T13729] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2237'. [ 491.490182][T13729] netlink: 'syz.5.2237': attribute type 1 has an invalid length. [ 491.586101][ T24] usb usb5-port1: attempt power cycle [ 491.650855][T13731] rose0: entered allmulticast mode [ 491.945864][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 491.968695][ T24] usb 5-1: device descriptor read/8, error -71 [ 492.070330][T13739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.081411][T13739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.205924][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 492.226587][ T24] usb 5-1: device descriptor read/8, error -71 [ 492.346602][ T24] usb usb5-port1: unable to enumerate USB device [ 492.902971][T13754] loop2: detected capacity change from 0 to 7 [ 492.913197][T13754] Dev loop2: unable to read RDB block 7 [ 492.919639][T13754] loop2: unable to read partition table [ 492.925487][T13754] loop2: partition table beyond EOD, truncated [ 492.934080][T13754] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 493.184407][T13761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.194765][T13761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.805966][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.820808][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.835683][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.849551][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.872037][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.886902][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.902253][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.914138][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.927565][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.937848][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.949407][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.958447][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.038583][T13773] netlink: 'syz.5.2252': attribute type 4 has an invalid length. [ 494.047729][T13773] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2252'. [ 494.159584][T13779] loop2: detected capacity change from 0 to 7 [ 494.170717][ T5873] Dev loop2: unable to read RDB block 7 [ 494.177871][ T5873] loop2: unable to read partition table [ 494.184239][ T5873] loop2: partition table beyond EOD, truncated [ 494.192677][T13779] Dev loop2: unable to read RDB block 7 [ 494.198403][T13779] loop2: unable to read partition table [ 494.204352][T13779] loop2: partition table beyond EOD, truncated [ 494.210992][T13779] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 494.225890][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 494.387507][ T24] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 494.396271][ T24] usb 5-1: config 1 has no interface number 0 [ 494.402955][ T24] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 494.417533][ T24] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 494.429080][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.439799][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.447893][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 494.457382][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.465512][ T24] usb 5-1: Product: syz [ 494.469966][ T24] usb 5-1: Manufacturer: syz [ 494.475562][ T24] usb 5-1: SerialNumber: syz [ 494.485404][T13769] raw-gadget.10 gadget.4: fail, usb_ep_enable returned -22 [ 494.499383][ T24] usb 5-1: Expected 3 endpoints, found: 2 [ 494.854434][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2258'. [ 495.115757][T13797] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.201295][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2262'. [ 495.209042][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.209493][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.215621][T13807] loop2: detected capacity change from 0 to 7 [ 495.221675][T13807] Dev loop2: unable to read RDB block 7 [ 495.221723][T13807] loop2: unable to read partition table [ 495.221937][T13807] loop2: partition table beyond EOD, truncated [ 495.221959][T13807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 496.919099][T12702] usb 5-1: USB disconnect, device number 21 [ 497.108689][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.109112][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.405848][T12702] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 497.536011][T12702] usb 5-1: device descriptor read/64, error -71 [ 497.785837][T12702] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 497.917367][T12702] usb 5-1: device descriptor read/64, error -71 [ 498.030586][T12702] usb usb5-port1: attempt power cycle [ 498.234554][ T24] usb 3-1: USB disconnect, device number 14 [ 498.316285][ T5869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 498.387446][T12702] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 498.429668][T12702] usb 5-1: device descriptor read/8, error -71 [ 498.516473][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.528582][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.538694][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.549178][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.557710][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.689296][T12702] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 498.702966][T13831] xt_socket: unknown flags 0xe4 [ 498.721135][T12702] usb 5-1: device descriptor read/8, error -71 [ 498.731901][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.743425][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.823256][T13826] chnl_net:caif_netlink_parms(): no params data found [ 498.848507][T12702] usb usb5-port1: unable to enumerate USB device [ 498.917148][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.924435][T13826] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.932099][T13826] bridge_slave_0: entered allmulticast mode [ 498.940484][T13826] bridge_slave_0: entered promiscuous mode [ 498.948572][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.956398][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.963835][T13826] bridge_slave_1: entered allmulticast mode [ 498.971860][T13826] bridge_slave_1: entered promiscuous mode [ 499.009152][T13826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.021500][T13826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.058992][T13826] team0: Port device team_slave_0 added [ 499.068305][T13826] team0: Port device team_slave_1 added [ 499.103095][T13826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.110606][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.136532][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.143554][T13826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.156516][T13826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.163586][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.192179][T13826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.244763][T13826] hsr_slave_0: entered promiscuous mode [ 499.251786][T13826] hsr_slave_1: entered promiscuous mode [ 499.258188][T13826] debugfs: 'hsr0' already exists in 'hsr' [ 499.263950][T13826] Cannot create hsr debugfs directory [ 499.372622][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.383721][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.394416][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.409775][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.421592][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.432668][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.443695][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.453205][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.466117][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.479683][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.492612][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.503483][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.594685][T13826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 499.608132][T13826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 499.620233][T13826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 499.633969][T13826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 499.672284][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.679716][T13826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.687435][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.694589][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.762643][T13826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.780992][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.789291][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.809092][T13826] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.822218][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.829450][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.844845][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.852064][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.090768][T13826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.168001][T13853] loop2: detected capacity change from 0 to 7 [ 500.187169][T13853] Dev loop2: unable to read RDB block 7 [ 500.192825][T13853] loop2: unable to read partition table [ 500.204312][T13853] loop2: partition table beyond EOD, truncated [ 500.225162][T13853] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 500.636070][ T5186] Bluetooth: hci1: command tx timeout [ 500.729009][T13826] veth0_vlan: entered promiscuous mode [ 500.791249][T13826] veth1_vlan: entered promiscuous mode [ 500.841434][T13826] veth0_macvtap: entered promiscuous mode [ 500.855488][T13826] veth1_macvtap: entered promiscuous mode [ 500.885398][T13826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.913106][T13826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.940211][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.961130][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.028905][ T3467] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.050282][ T3467] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.144361][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.165034][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.223194][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.245854][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 501.248356][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.390301][T13884] (syz.8.2268,13884,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 501.401559][T13884] (syz.8.2268,13884,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 501.417637][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.422118][T13884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.441006][T13884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.467161][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.488969][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 501.498334][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.523193][ T24] usb 5-1: config 0 descriptor?? [ 501.537146][T13889] binder: BINDER_SET_CONTEXT_MGR already set [ 501.562004][T13889] binder: 13886:13889 ioctl 4018620d 200000000100 returned -16 [ 501.569671][T13892] loop2: detected capacity change from 0 to 7 [ 501.573539][T13892] Dev loop2: unable to read RDB block 7 [ 501.582355][T13892] loop2: unable to read partition table [ 501.589212][T13892] loop2: partition table beyond EOD, truncated [ 501.596240][T13892] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.666105][ T5967] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 501.699539][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.706223][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.764544][T13876] tmpfs: Unknown parameter 'noswBƒ Ißòóap' [ 501.795221][T13895] loop2: detected capacity change from 0 to 7 [ 501.804226][ T5873] Dev loop2: unable to read RDB block 7 [ 501.811277][ T5873] loop2: unable to read partition table [ 501.819615][ T5873] loop2: partition table beyond EOD, truncated [ 501.832437][T13895] Dev loop2: unable to read RDB block 7 [ 501.840245][T13895] loop2: unable to read partition table [ 501.848104][T13895] loop2: partition table beyond EOD, truncated [ 501.855893][ T5967] usb 9-1: device descriptor read/64, error -71 [ 501.877508][T13895] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.917059][ T5236] Dev loop2: unable to read RDB block 7 [ 501.922822][ T5236] loop2: unable to read partition table [ 501.930348][ T5236] loop2: partition table beyond EOD, truncated [ 501.945127][T13900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.955700][T13900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.998466][T13900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.019733][T13900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.095854][ T5967] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 502.099189][ T24] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 502.133363][ T24] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 502.161124][ T24] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 502.174603][ T24] cp2112 0003:10C4:EA90.002E: reserved main item tag 0xe [ 502.182573][ T24] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 502.190036][ T24] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 502.200252][ T24] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 502.236920][ T5967] usb 9-1: device descriptor read/64, error -71 [ 502.291019][ T24] cp2112 0003:10C4:EA90.002E: Part Number: 0x00 Device Version: 0x00 [ 502.348745][ T5967] usb usb9-port1: attempt power cycle [ 502.685965][ T5967] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 502.706612][ T5967] usb 9-1: device descriptor read/8, error -71 [ 502.716055][ T5186] Bluetooth: hci1: command tx timeout [ 502.883757][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.912225][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.938401][ T24] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 502.949611][ T24] usb 5-1: USB disconnect, device number 26 [ 502.956199][ T5967] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 502.987454][ T5967] usb 9-1: device descriptor read/8, error -71 [ 503.096296][ T5967] usb usb9-port1: unable to enumerate USB device [ 503.527279][T13920] loop2: detected capacity change from 0 to 7 [ 503.537273][T13920] Dev loop2: unable to read RDB block 7 [ 503.543699][T13920] loop2: unable to read partition table [ 503.560152][T13920] loop2: partition table beyond EOD, truncated [ 503.576744][T13920] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.639011][T13927] loop2: detected capacity change from 0 to 7 [ 503.658125][ T5873] Dev loop2: unable to read RDB block 7 [ 503.663762][ T5873] loop2: unable to read partition table [ 503.687425][ T5873] loop2: partition table beyond EOD, truncated [ 503.705966][T13927] Dev loop2: unable to read RDB block 7 [ 503.720964][T13927] loop2: unable to read partition table [ 503.727461][T13927] loop2: partition table beyond EOD, truncated [ 503.734155][T13927] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.934708][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.949630][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.487471][T13944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 504.494629][T13944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 504.527907][T13944] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 504.535020][T13944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 504.551949][T13944] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 504.561130][T13944] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 504.568949][T13944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 504.575494][T13944] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 504.578738][T13947] XFS (nullb0): Invalid superblock magic number [ 504.582651][T13944] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 504.605150][T13944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 504.613627][T13944] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 504.620287][ T5953] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 504.621895][T13944] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 504.647391][T13944] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 504.655329][T13944] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 504.663725][T13944] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 504.670623][T13944] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 504.789952][T13957] loop2: detected capacity change from 0 to 7 [ 504.798918][ T5873] Dev loop2: unable to read RDB block 7 [ 504.804615][ T5873] loop2: unable to read partition table [ 504.811705][ T5186] Bluetooth: hci1: command tx timeout [ 504.818666][ T5873] loop2: partition table beyond EOD, truncated [ 504.824491][ T5953] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 504.833921][ T5953] usb 5-1: config 0 has no interface number 0 [ 504.840320][ T5953] usb 5-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 504.841287][T13957] Dev loop2: unable to read RDB block 7 [ 504.851931][ T5953] usb 5-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 504.862534][T13957] loop2: unable to read partition table [ 504.870936][ T5953] usb 5-1: config 0 interface 153 has no altsetting 0 [ 504.884201][T13957] loop2: partition table beyond EOD, truncated [ 504.891347][T13957] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 504.907539][ T5953] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 504.923356][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.943950][ T5953] usb 5-1: Product: syz [ 504.954379][ T5953] usb 5-1: Manufacturer: syz [ 504.964202][ T5953] usb 5-1: SerialNumber: syz [ 504.978144][ T5953] usb 5-1: config 0 descriptor?? [ 504.993519][ T5953] hub 5-1:0.153: bad descriptor, ignoring hub [ 505.006149][ T5953] hub 5-1:0.153: probe with driver hub failed with error -5 [ 505.016374][ T5953] sierra 5-1:0.153: Sierra USB modem converter detected [ 505.102003][T13961] (syz.5.2304,13961,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 505.111498][T13961] (syz.5.2304,13961,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 505.187524][T13963] loop2: detected capacity change from 0 to 7 [ 505.197712][T13963] Dev loop2: unable to read RDB block 7 [ 505.203503][T13963] loop2: unable to read partition table [ 505.209751][T13963] loop2: partition table beyond EOD, truncated [ 505.216532][T13963] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 505.329190][ T5953] usb 5-1: USB disconnect, device number 27 [ 505.347758][ T5953] sierra 5-1:0.153: device disconnected [ 505.704259][T13982] loop2: detected capacity change from 0 to 7 [ 505.717062][T13982] Dev loop2: unable to read RDB block 7 [ 505.740052][T13982] loop2: unable to read partition table [ 505.750965][T13982] loop2: partition table beyond EOD, truncated [ 505.758443][T13982] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 505.904327][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.914651][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.960728][T13986] syz.5.2313 (13986): drop_caches: 2 [ 506.125918][ T5967] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 506.277806][ T5967] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 506.288436][ T5967] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 506.299572][ T5967] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 506.309742][ T5967] usb 5-1: config 48 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 506.323152][ T5967] usb 5-1: config 48 interface 0 has no altsetting 0 [ 506.332725][ T5967] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 506.343078][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.352708][ T5967] usb 5-1: Product: syz [ 506.357298][ T5967] usb 5-1: Manufacturer: syz [ 506.362112][ T5967] usb 5-1: SerialNumber: syz [ 506.417266][T13991] loop2: detected capacity change from 0 to 7 [ 506.424586][T13991] Dev loop2: unable to read RDB block 7 [ 506.430320][T13991] loop2: unable to read partition table [ 506.436324][T13991] loop2: partition table beyond EOD, truncated [ 506.442531][T13991] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.600800][ T5967] usb 5-1: USB disconnect, device number 28 [ 506.876190][ T5186] Bluetooth: hci1: command tx timeout [ 506.893247][T14005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.893737][T14005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.154321][T14008] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2319'. [ 507.642749][T14016] loop2: detected capacity change from 0 to 7 [ 507.644398][ T5873] Dev loop2: unable to read RDB block 7 [ 507.644444][ T5873] loop2: unable to read partition table [ 507.644683][ T5873] loop2: partition table beyond EOD, truncated [ 507.648488][T14016] Dev loop2: unable to read RDB block 7 [ 507.648535][T14016] loop2: unable to read partition table [ 507.648761][T14016] loop2: partition table beyond EOD, truncated [ 507.648785][T14016] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 508.401698][T14037] syzkaller1: entered promiscuous mode [ 508.410086][T14037] syzkaller1: entered allmulticast mode [ 508.675983][ T44] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 508.739416][T14049] loop2: detected capacity change from 0 to 7 [ 508.750099][T14049] Dev loop2: unable to read RDB block 7 [ 508.757705][T14049] loop2: unable to read partition table [ 508.763537][T14049] loop2: partition table beyond EOD, truncated [ 508.769911][T14049] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 508.833703][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 508.836598][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 508.852797][ T44] usb 5-1: config 4 has an invalid interface number: 92 but max is 0 [ 508.867810][ T44] usb 5-1: config 4 has no interface number 0 [ 508.873214][T14051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.874029][ T44] usb 5-1: config 4 interface 92 has no altsetting 0 [ 508.886298][T14051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.893872][ T44] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 508.909734][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.918465][ T44] usb 5-1: Product: syz [ 508.922648][ T44] usb 5-1: Manufacturer: syz [ 508.927496][ T44] usb 5-1: SerialNumber: syz [ 509.015793][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 509.022699][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.041744][ T9] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 509.051002][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.059098][ T9] usb 9-1: Product: syz [ 509.063292][ T9] usb 9-1: Manufacturer: syz [ 509.067990][ T9] usb 9-1: SerialNumber: syz [ 509.075162][ T9] usb 9-1: config 0 descriptor?? [ 509.083865][ T9] usb 9-1: bad CDC descriptors [ 509.090212][ T9] usb 9-1: unsupported MDLM descriptors [ 509.148559][ T44] radioshark 5-1:4.92: Invalid radioSHARK device [ 509.157375][ T44] radioshark 5-1:4.92: probe with driver radioshark failed with error -22 [ 509.171387][ T44] usbhid 5-1:4.92: couldn't find an input interrupt endpoint [ 509.186808][ T44] usb 5-1: USB disconnect, device number 29 [ 509.380989][ T9] usb 9-1: USB disconnect, device number 6 [ 509.550144][T14056] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2334'. [ 509.560269][T14056] tmpfs: Bad value for 'mpol' [ 509.571652][T14056] overlayfs: failed to resolve './file0/file0': -2 [ 509.773515][T14065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.789231][T14065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.831108][T14065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.843697][T14063] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 509.853227][T14065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.864493][T14064] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 510.400259][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.409603][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.133061][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.154253][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.226973][ T5953] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 511.229652][T14109] IPVS: length: 68 != 24 [ 511.399908][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 511.410091][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 511.421853][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 511.434290][ T5953] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 511.443637][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.451726][ T5953] usb 5-1: Product: syz [ 511.457047][ T5953] usb 5-1: Manufacturer: syz [ 511.461671][ T5953] usb 5-1: SerialNumber: syz [ 511.468687][ T5953] usb 5-1: config 0 descriptor?? [ 511.475432][T14098] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 511.479246][ T5912] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 511.483011][T14098] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 511.498846][ T5953] usb 5-1: ucan: probing device on interface #0 [ 511.635087][T14111] loop2: detected capacity change from 0 to 7 [ 511.642616][T14111] Dev loop2: unable to read RDB block 7 [ 511.648485][ T5912] usb 9-1: Using ep0 maxpacket: 16 [ 511.653782][T14111] loop2: unable to read partition table [ 511.660389][T14111] loop2: partition table beyond EOD, truncated [ 511.678229][T14111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 511.712158][ T5912] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 511.723210][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.734668][ T5912] usb 9-1: Product: syz [ 511.739866][ T5912] usb 9-1: Manufacturer: syz [ 511.744510][ T5912] usb 9-1: SerialNumber: syz [ 511.786566][ T5912] usb 9-1: config 0 descriptor?? [ 511.787419][T14113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.806551][T14113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.836425][ T5912] as10x_usb: device has been detected [ 511.850445][ T5912] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 511.888396][ T5912] usb 9-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 511.903820][ T5953] usb 5-1: ucan: device reported invalid tx-fifo size [ 511.912997][ T5953] usb 5-1: ucan: probe failed; try to update the device firmware [ 511.923244][ T5912] as10x_usb: error during firmware upload part1 [ 511.930367][ T5912] Registered device Sky IT Digital Key (green led) [ 512.001274][ T5912] usb 9-1: USB disconnect, device number 7 [ 512.034151][ T5912] Unregistered device Sky IT Digital Key (green led) [ 512.035431][ T5912] as10x_usb: device has been disconnected [ 512.461933][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.470860][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.481120][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.492920][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.883475][T14137] loop2: detected capacity change from 0 to 7 [ 512.892992][ T5873] Dev loop2: unable to read RDB block 7 [ 512.900071][ T5873] loop2: unable to read partition table [ 512.909316][ T5873] loop2: partition table beyond EOD, truncated [ 512.915888][ T5953] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 512.923794][T14137] Dev loop2: unable to read RDB block 7 [ 512.929480][T14137] loop2: unable to read partition table [ 512.935416][T14137] loop2: partition table beyond EOD, truncated [ 512.943021][T14137] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 513.056260][ T5953] usb 9-1: device descriptor read/64, error -71 [ 513.124791][T14144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.135151][T14144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.326923][ T5953] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 513.466028][ T5953] usb 9-1: device descriptor read/64, error -71 [ 513.576387][ T5953] usb usb9-port1: attempt power cycle [ 513.874016][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 513.916021][ T5953] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 513.939276][ T5953] usb 9-1: device descriptor read/8, error -71 [ 513.967511][T12702] usb 5-1: USB disconnect, device number 30 [ 514.143810][T14161] loop2: detected capacity change from 0 to 7 [ 514.153007][ T5873] Dev loop2: unable to read RDB block 7 [ 514.159176][ T5873] loop2: unable to read partition table [ 514.165179][ T5873] loop2: partition table beyond EOD, truncated [ 514.180450][T14161] Dev loop2: unable to read RDB block 7 [ 514.187017][T14161] loop2: unable to read partition table [ 514.193312][T14161] loop2: partition table beyond EOD, truncated [ 514.203843][T14161] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 514.205879][ T5953] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 514.270381][ T5953] usb 9-1: device descriptor read/8, error -71 [ 514.309471][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.342337][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.373766][T14167] loop2: detected capacity change from 0 to 7 [ 514.380895][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2374'. [ 514.386766][T14167] Dev loop2: unable to read RDB block 7 [ 514.401332][T14167] loop2: unable to read partition table [ 514.403481][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.407463][ T5953] usb usb9-port1: unable to enumerate USB device [ 514.416824][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.427640][T14167] loop2: partition table beyond EOD, truncated [ 514.445953][T14167] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 514.541709][T14169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 514.548372][T14169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 514.559835][T14169] vhci_hcd vhci_hcd.0: Device attached [ 514.572665][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 514.584509][T14170] vhci_hcd: connection closed [ 514.585906][ T3478] vhci_hcd: stop threads [ 514.594937][ T3478] vhci_hcd: release socket [ 514.599816][ T3478] vhci_hcd: disconnect device [ 515.057387][T14179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.067758][T14179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.376088][T12702] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 515.528204][T12702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.538441][T12702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.548494][T12702] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.557860][T12702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 515.565912][T12702] usb 5-1: SerialNumber: syz [ 515.632492][T14188] loop2: detected capacity change from 0 to 7 [ 515.642794][T14188] Dev loop2: unable to read RDB block 7 [ 515.649281][T14188] loop2: unable to read partition table [ 515.655273][T14188] loop2: partition table beyond EOD, truncated [ 515.661739][T14188] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 515.795511][T12702] usb 5-1: 0:2 : does not exist [ 515.800567][T12702] usb 5-1: unit 255 not found! [ 515.836200][T12702] usb 5-1: USB disconnect, device number 31 [ 515.856002][T14192] loop2: detected capacity change from 0 to 7 [ 515.877363][T14192] Dev loop2: unable to read RDB block 7 [ 515.883006][T14192] loop2: unable to read partition table [ 515.895024][T14192] loop2: partition table beyond EOD, truncated [ 515.915274][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.934064][T14192] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.261734][T14200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.272484][T14200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.296803][T14200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.313759][T14200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.336261][ T5912] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 516.345200][T14200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.369274][T14200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.516651][ T5912] usb 9-1: Using ep0 maxpacket: 8 [ 516.522465][ T5912] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 516.535558][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 516.543410][ T5912] usb 9-1: can't read configurations, error -61 [ 516.675946][ T5912] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 516.728788][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 516.825897][ T5912] usb 9-1: Using ep0 maxpacket: 8 [ 516.832115][ T5912] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 516.843502][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 516.851158][ T5912] usb 9-1: can't read configurations, error -61 [ 516.857909][ T5912] usb usb9-port1: attempt power cycle [ 516.957657][T14210] loop2: detected capacity change from 0 to 7 [ 516.964788][T14210] Dev loop2: unable to read RDB block 7 [ 516.970555][T14210] loop2: unable to read partition table [ 516.977136][T14210] loop2: partition table beyond EOD, truncated [ 516.983430][T14210] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.058099][T14212] loop2: detected capacity change from 0 to 7 [ 517.069078][T14212] Dev loop2: unable to read RDB block 7 [ 517.075637][T14212] loop2: unable to read partition table [ 517.083665][T14212] loop2: partition table beyond EOD, truncated [ 517.090251][T14212] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.196261][ T5912] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 517.237576][ T5912] usb 9-1: Using ep0 maxpacket: 8 [ 517.246346][ T5912] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 517.265060][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 517.274172][ T5912] usb 9-1: can't read configurations, error -61 [ 517.425823][ T5912] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 517.457795][ T5912] usb 9-1: Using ep0 maxpacket: 8 [ 517.467177][ T5912] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 517.490158][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 517.505780][ T5912] usb 9-1: can't read configurations, error -61 [ 517.521170][ T5912] usb usb9-port1: unable to enumerate USB device [ 517.929377][T14219] tmpfs: Unknown parameter '' [ 518.333317][ T24] usb 6-1: USB disconnect, device number 127 [ 518.695301][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 518.705510][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 518.716459][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 518.724544][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 518.733889][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 518.810266][T14238] loop2: detected capacity change from 0 to 7 [ 518.845347][T14238] Dev loop2: unable to read RDB block 7 [ 518.865479][T14238] loop2: unable to read partition table [ 518.878751][T14238] loop2: partition table beyond EOD, truncated [ 518.915871][T14238] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.274686][T14249] block nbd7: Attempted send on invalid socket [ 519.337517][T14249] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 519.533547][T14256] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2406'. [ 519.575061][T14233] chnl_net:caif_netlink_parms(): no params data found [ 519.611732][T14259] netlink: 'syz.7.2407': attribute type 1 has an invalid length. [ 519.656193][ T5912] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 519.798090][ T5912] usb 9-1: device descriptor read/64, error -71 [ 519.806848][T14269] netlink: 'syz.7.2408': attribute type 2 has an invalid length. [ 519.816117][T14269] netlink: 'syz.7.2408': attribute type 1 has an invalid length. [ 519.827414][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.846418][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.858407][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.869843][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.892445][T11614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.942198][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.944167][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.952391][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.969946][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.980297][T14233] bridge_slave_0: entered allmulticast mode [ 519.990097][T14233] bridge_slave_0: entered promiscuous mode [ 520.014828][T11614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.033852][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.041273][ T5912] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 520.054894][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.062684][T14233] bridge_slave_1: entered allmulticast mode [ 520.070853][T14233] bridge_slave_1: entered promiscuous mode [ 520.086115][ T93] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 520.160551][T11614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.186105][ T5912] usb 9-1: device descriptor read/64, error -71 [ 520.197323][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.210060][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.243281][T11614] bond0: (slave netdevsim0): Releasing backup interface [ 520.260299][T11614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.299274][ T5912] usb usb9-port1: attempt power cycle [ 520.330482][T14277] loop2: detected capacity change from 0 to 7 [ 520.344422][T14277] Dev loop2: unable to read RDB block 7 [ 520.352046][T14277] loop2: unable to read partition table [ 520.359141][T14277] loop2: partition table beyond EOD, truncated [ 520.365924][T14277] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 520.378658][T14233] team0: Port device team_slave_0 added [ 520.401096][ T5236] Dev loop2: unable to read RDB block 7 [ 520.402146][T14233] team0: Port device team_slave_1 added [ 520.414844][ T5236] loop2: unable to read partition table [ 520.423153][ T5236] loop2: partition table beyond EOD, truncated [ 520.518038][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.525028][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.563526][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.629218][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.634342][T14279] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 520.636335][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.636367][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.683814][ T5912] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 520.725885][ T5912] usb 9-1: device descriptor read/8, error -71 [ 520.781429][T14233] hsr_slave_0: entered promiscuous mode [ 520.798602][ T5186] Bluetooth: hci5: command tx timeout [ 520.818186][T14233] hsr_slave_1: entered promiscuous mode [ 520.824373][T14233] debugfs: 'hsr0' already exists in 'hsr' [ 520.831177][T14233] Cannot create hsr debugfs directory [ 520.837039][T11614] team0: left allmulticast mode [ 520.841949][T11614] team_slave_0: left allmulticast mode [ 520.847477][T11614] team_slave_1: left allmulticast mode [ 520.852956][T11614] geneve1: left allmulticast mode [ 520.858887][T11614] bridge0: port 3(team0) entered disabled state [ 520.870274][T11614] bridge_slave_1: left allmulticast mode [ 520.876141][T11614] bridge_slave_1: left promiscuous mode [ 520.881896][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.891137][T11614] bridge_slave_0: left allmulticast mode [ 520.897458][T11614] bridge_slave_0: left promiscuous mode [ 520.903389][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.966823][ T5912] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 520.991722][ T5912] usb 9-1: device descriptor read/8, error -71 [ 521.100823][T11614] geneve1 (unregistering): left promiscuous mode [ 521.107751][ T5912] usb usb9-port1: unable to enumerate USB device [ 521.114824][T11614] team0: Port device geneve1 removed [ 521.181503][ T93] usb 5-1: device descriptor read/64, error -71 [ 521.280233][T11614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.292541][T11614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.305215][T11614] bond0 (unregistering): Released all slaves [ 521.426089][ T93] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 521.601766][ T93] usb 5-1: Using ep0 maxpacket: 32 [ 521.617378][ T93] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 521.625503][ T93] usb 5-1: config 0 has no interface number 0 [ 521.650797][ T93] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 521.660639][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.669403][ T93] usb 5-1: Product: syz [ 521.673601][ T93] usb 5-1: Manufacturer: syz [ 521.678670][ T93] usb 5-1: SerialNumber: syz [ 521.690216][ T93] usb 5-1: config 0 descriptor?? [ 521.715091][ T93] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 521.733575][ T93] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 521.775340][T11614] hsr_slave_0: left promiscuous mode [ 521.790499][T11614] hsr_slave_1: left promiscuous mode [ 521.800134][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.809054][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.820278][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.833161][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.869300][T11614] veth0_macvtap: left promiscuous mode [ 521.875021][T11614] veth1_vlan: left promiscuous mode [ 521.882846][T11614] veth0_vlan: left promiscuous mode [ 521.916841][ T93] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 521.988483][ T93] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 522.033623][ T93] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 522.080051][ T93] usb 5-1: USB disconnect, device number 34 [ 522.102171][ T93] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 522.879143][ T5186] Bluetooth: hci5: command tx timeout [ 523.762412][T11614] team_slave_1 (unregistering): left promiscuous mode [ 523.768064][T11614] team0 (unregistering): Port device team_slave_1 removed [ 523.906548][T11614] team_slave_0 (unregistering): left promiscuous mode [ 523.914606][T11614] team0 (unregistering): Port device team_slave_0 removed [ 524.104856][T14318] loop2: detected capacity change from 0 to 7 [ 524.108013][T14318] Dev loop2: unable to read RDB block 7 [ 524.108061][T14318] loop2: unable to read partition table [ 524.108272][T14318] loop2: partition table beyond EOD, truncated [ 524.108306][T14318] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 524.206927][T14320] loop2: detected capacity change from 0 to 7 [ 524.208325][T14320] Dev loop2: unable to read RDB block 7 [ 524.208367][T14320] loop2: unable to read partition table [ 524.208571][T14320] loop2: partition table beyond EOD, truncated [ 524.208592][T14320] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 524.968205][ T5186] Bluetooth: hci5: command tx timeout [ 525.237331][T14331] nbd0: detected capacity change from 0 to 127 [ 525.268141][ T5186] block nbd0: Receive control failed (result -104) [ 525.274000][ T5869] block nbd0: Receive control failed (result -32) [ 525.302180][T14233] [ 525.304554][T14233] ====================================================== [ 525.311584][T14233] WARNING: possible circular locking dependency detected [ 525.318624][T14233] syzkaller #0 Not tainted [ 525.323046][T14233] ------------------------------------------------------ [ 525.330064][T14233] syz-executor/14233 is trying to acquire lock: [ 525.336330][T14233] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60 [ 525.345561][T14233] [ 525.345561][T14233] but task is already holding lock: [ 525.352927][T14233] ffffffff8ef181c8 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 525.361632][T14233] [ 525.361632][T14233] which lock already depends on the new lock. [ 525.361632][T14233] [ 525.372037][T14233] [ 525.372037][T14233] the existing dependency chain (in reverse order) is: [ 525.381048][T14233] [ 525.381048][T14233] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 525.388278][T14233] lock_acquire+0x120/0x360 [ 525.393322][T14233] __mutex_lock+0x187/0x1350 [ 525.398448][T14233] get_device_parent+0x16f/0x3a0 [ 525.403910][T14233] device_add+0x2e1/0xb50 [ 525.408774][T14233] device_create+0x25b/0x2f0 [ 525.413890][T14233] msr_device_create+0x33/0x50 [ 525.419176][T14233] cpuhp_invoke_callback+0x445/0x860 [ 525.424989][T14233] cpuhp_thread_fun+0x3f4/0x850 [ 525.430364][T14233] smpboot_thread_fn+0x542/0xa60 [ 525.435827][T14233] kthread+0x70e/0x8a0 [ 525.440434][T14233] ret_from_fork+0x47c/0x820 [ 525.445550][T14233] ret_from_fork_asm+0x1a/0x30 [ 525.450829][T14233] [ 525.450829][T14233] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 525.458481][T14233] lock_acquire+0x120/0x360 [ 525.463511][T14233] cpuhp_thread_fun+0x182/0x850 [ 525.468933][T14233] smpboot_thread_fn+0x542/0xa60 [ 525.474422][T14233] kthread+0x70e/0x8a0 [ 525.479018][T14233] ret_from_fork+0x47c/0x820 [ 525.484134][T14233] ret_from_fork_asm+0x1a/0x30 [ 525.489454][T14233] [ 525.489454][T14233] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 525.497193][T14233] lock_acquire+0x120/0x360 [ 525.502221][T14233] cpus_read_lock+0x42/0x160 [ 525.507341][T14233] static_key_slow_inc+0x12/0x30 [ 525.512801][T14233] setup_udp_tunnel_sock+0x34f/0x550 [ 525.518649][T14233] l2tp_tunnel_register+0xcb6/0x1320 [ 525.524541][T14233] pppol2tp_connect+0x87c/0x1750 [ 525.529995][T14233] __sys_connect+0x316/0x440 [ 525.535108][T14233] __x64_sys_connect+0x7a/0x90 [ 525.540397][T14233] do_syscall_64+0xfa/0xfa0 [ 525.545426][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.551847][T14233] [ 525.551847][T14233] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 525.559498][T14233] lock_acquire+0x120/0x360 [ 525.564526][T14233] lock_sock_nested+0x48/0x100 [ 525.569826][T14233] inet_shutdown+0x6a/0x390 [ 525.574855][T14233] nbd_mark_nsock_dead+0x2e9/0x560 [ 525.580488][T14233] sock_shutdown+0x15e/0x260 [ 525.585603][T14233] nbd_config_put+0x342/0x790 [ 525.590800][T14233] nbd_release+0xfe/0x140 [ 525.595650][T14233] bdev_release+0x536/0x650 [ 525.600686][T14233] blkdev_release+0x15/0x20 [ 525.605709][T14233] __fput+0x44c/0xa70 [ 525.610231][T14233] task_work_run+0x1d1/0x260 [ 525.615339][T14233] exit_to_user_mode_loop+0xec/0x130 [ 525.621145][T14233] do_syscall_64+0x2bd/0xfa0 [ 525.626264][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.632678][T14233] [ 525.632678][T14233] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 525.640339][T14233] lock_acquire+0x120/0x360 [ 525.645363][T14233] __mutex_lock+0x187/0x1350 [ 525.650490][T14233] nbd_queue_rq+0x257/0xf10 [ 525.655536][T14233] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 525.661608][T14233] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 525.668461][T14233] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 525.674967][T14233] blk_mq_run_hw_queue+0x348/0x4f0 [ 525.680603][T14233] blk_mq_dispatch_list+0xd0c/0xe00 [ 525.686329][T14233] blk_mq_flush_plug_list+0x469/0x550 [ 525.692227][T14233] __blk_flush_plug+0x3d3/0x4b0 [ 525.697608][T14233] __submit_bio+0x2d3/0x5a0 [ 525.702631][T14233] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 525.708810][T14233] block_read_full_folio+0x599/0x830 [ 525.714615][T14233] filemap_read_folio+0x114/0x380 [ 525.720164][T14233] do_read_cache_folio+0x350/0x590 [ 525.725802][T14233] read_part_sector+0xb6/0x2b0 [ 525.731094][T14233] adfspart_check_ICS+0xa4/0xa50 [ 525.736559][T14233] bdev_disk_changed+0x75c/0x14b0 [ 525.742109][T14233] blkdev_get_whole+0x380/0x510 [ 525.747492][T14233] bdev_open+0x31e/0xd30 [ 525.752260][T14233] blkdev_open+0x457/0x600 [ 525.757199][T14233] do_dentry_open+0x953/0x13f0 [ 525.762485][T14233] vfs_open+0x3b/0x340 [ 525.767078][T14233] path_openat+0x2ee5/0x3830 [ 525.772186][T14233] do_filp_open+0x1fa/0x410 [ 525.777206][T14233] do_sys_openat2+0x121/0x1c0 [ 525.782405][T14233] __x64_sys_openat+0x138/0x170 [ 525.787777][T14233] do_syscall_64+0xfa/0xfa0 [ 525.792806][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.799219][T14233] [ 525.799219][T14233] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 525.806437][T14233] lock_acquire+0x120/0x360 [ 525.811466][T14233] __mutex_lock+0x187/0x1350 [ 525.816591][T14233] nbd_queue_rq+0xc8/0xf10 [ 525.821537][T14233] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 525.827611][T14233] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 525.834468][T14233] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 525.840976][T14233] blk_mq_run_hw_queue+0x348/0x4f0 [ 525.846615][T14233] blk_mq_dispatch_list+0xd0c/0xe00 [ 525.852341][T14233] blk_mq_flush_plug_list+0x469/0x550 [ 525.858253][T14233] __blk_flush_plug+0x3d3/0x4b0 [ 525.863634][T14233] __submit_bio+0x2d3/0x5a0 [ 525.868654][T14233] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 525.874807][T14233] __bread_gfp+0x216/0x3c0 [ 525.879774][T14233] fat_fill_super+0x5e2/0x3570 [ 525.885064][T14233] get_tree_bdev_flags+0x40b/0x4d0 [ 525.890701][T14233] vfs_get_tree+0x8f/0x2b0 [ 525.895640][T14233] do_new_mount+0x2ee/0xa90 [ 525.900669][T14233] __se_sys_mount+0x317/0x410 [ 525.905907][T14233] do_syscall_64+0xfa/0xfa0 [ 525.910948][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.917365][T14233] [ 525.917365][T14233] -> #4 (set->srcu){.+.+}-{0:0}: [ 525.924528][T14233] lock_sync+0xba/0x160 [ 525.929229][T14233] __synchronize_srcu+0x96/0x3a0 [ 525.934719][T14233] elevator_switch+0x12b/0x640 [ 525.940024][T14233] elevator_change+0x2d4/0x450 [ 525.945322][T14233] elevator_set_default+0x186/0x260 [ 525.951059][T14233] blk_register_queue+0x34e/0x3f0 [ 525.956611][T14233] __add_disk+0x677/0xd50 [ 525.961477][T14233] add_disk_fwnode+0xfc/0x480 [ 525.966689][T14233] nbd_dev_add+0x717/0xae0 [ 525.971632][T14233] nbd_init+0x168/0x1f0 [ 525.976309][T14233] do_one_initcall+0x233/0x820 [ 525.981594][T14233] do_initcall_level+0x104/0x190 [ 525.987058][T14233] do_initcalls+0x59/0xa0 [ 525.991910][T14233] kernel_init_freeable+0x334/0x4b0 [ 525.997635][T14233] kernel_init+0x1d/0x1d0 [ 526.002486][T14233] ret_from_fork+0x47c/0x820 [ 526.007599][T14233] ret_from_fork_asm+0x1a/0x30 [ 526.012901][T14233] [ 526.012901][T14233] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 526.020741][T14233] lock_acquire+0x120/0x360 [ 526.025764][T14233] __mutex_lock+0x187/0x1350 [ 526.030878][T14233] elevator_change+0x19b/0x450 [ 526.036187][T14233] elevator_set_none+0x42/0xb0 [ 526.041489][T14233] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 526.047815][T14233] nbd_start_device+0x17f/0xb10 [ 526.053190][T14233] nbd_genl_connect+0x135b/0x18f0 [ 526.058764][T14233] genl_family_rcv_msg_doit+0x212/0x300 [ 526.064834][T14233] genl_rcv_msg+0x60e/0x790 [ 526.069878][T14233] netlink_rcv_skb+0x205/0x470 [ 526.075179][T14233] genl_rcv+0x28/0x40 [ 526.079738][T14233] netlink_unicast+0x82c/0x9e0 [ 526.085034][T14233] netlink_sendmsg+0x805/0xb30 [ 526.090332][T14233] __sock_sendmsg+0x21c/0x270 [ 526.095540][T14233] ____sys_sendmsg+0x505/0x830 [ 526.100823][T14233] ___sys_sendmsg+0x21f/0x2a0 [ 526.106013][T14233] __x64_sys_sendmsg+0x19b/0x260 [ 526.111473][T14233] do_syscall_64+0xfa/0xfa0 [ 526.116515][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.122932][T14233] [ 526.122932][T14233] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 526.131537][T14233] lock_acquire+0x120/0x360 [ 526.136563][T14233] blk_alloc_queue+0x538/0x620 [ 526.141857][T14233] __blk_mq_alloc_disk+0x15c/0x340 [ 526.147515][T14233] nbd_dev_add+0x46c/0xae0 [ 526.152456][T14233] nbd_init+0x168/0x1f0 [ 526.157128][T14233] do_one_initcall+0x233/0x820 [ 526.162417][T14233] do_initcall_level+0x104/0x190 [ 526.167876][T14233] do_initcalls+0x59/0xa0 [ 526.172726][T14233] kernel_init_freeable+0x334/0x4b0 [ 526.178448][T14233] kernel_init+0x1d/0x1d0 [ 526.183305][T14233] ret_from_fork+0x47c/0x820 [ 526.188421][T14233] ret_from_fork_asm+0x1a/0x30 [ 526.193710][T14233] [ 526.193710][T14233] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 526.200934][T14233] lock_acquire+0x120/0x360 [ 526.205967][T14233] fs_reclaim_acquire+0x72/0x100 [ 526.211424][T14233] kmem_cache_alloc_lru_noprof+0x4a/0x6d0 [ 526.217661][T14233] alloc_inode+0xb8/0x1b0 [ 526.222512][T14233] iget_locked+0xf0/0x570 [ 526.227364][T14233] kernfs_get_inode+0x4f/0x780 [ 526.232655][T14233] kernfs_get_tree+0x5a9/0x920 [ 526.237939][T14233] sysfs_get_tree+0x46/0x110 [ 526.243052][T14233] vfs_get_tree+0x8f/0x2b0 [ 526.247992][T14233] do_new_mount+0x2ee/0xa90 [ 526.253018][T14233] __se_sys_mount+0x317/0x410 [ 526.258217][T14233] do_syscall_64+0xfa/0xfa0 [ 526.263249][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.269665][T14233] [ 526.269665][T14233] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 526.277661][T14233] validate_chain+0xb9b/0x2140 [ 526.282956][T14233] __lock_acquire+0xab9/0xd20 [ 526.288165][T14233] lock_acquire+0x120/0x360 [ 526.293197][T14233] down_write+0x96/0x1f0 [ 526.297966][T14233] kernfs_remove+0x30/0x60 [ 526.302905][T14233] __kobject_del+0xe1/0x300 [ 526.307957][T14233] kobject_del+0x45/0x60 [ 526.312739][T14233] cleanup_glue_dir+0x1a3/0x220 [ 526.318150][T14233] device_del+0x76a/0x8e0 [ 526.323004][T14233] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 526.329983][T14233] unregister_netdevice_queue+0x33c/0x380 [ 526.336229][T14233] nsim_destroy+0x1dd/0x670 [ 526.341283][T14233] __nsim_dev_port_del+0x14d/0x1b0 [ 526.346921][T14233] nsim_dev_reload_destroy+0x288/0x490 [ 526.352902][T14233] nsim_drv_remove+0x58/0x160 [ 526.358110][T14233] device_release_driver_internal+0x46f/0x800 [ 526.364698][T14233] bus_remove_device+0x34d/0x410 [ 526.370155][T14233] device_del+0x511/0x8e0 [ 526.375003][T14233] device_unregister+0x20/0xc0 [ 526.380290][T14233] del_device_store+0x2aa/0x360 [ 526.385664][T14233] kernfs_fop_write_iter+0x375/0x4f0 [ 526.391469][T14233] vfs_write+0x5c6/0xb30 [ 526.396234][T14233] ksys_write+0x145/0x250 [ 526.401084][T14233] do_syscall_64+0xfa/0xfa0 [ 526.406107][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.412526][T14233] [ 526.412526][T14233] other info that might help us debug this: [ 526.412526][T14233] [ 526.422783][T14233] Chain exists of: [ 526.422783][T14233] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 526.422783][T14233] [ 526.435582][T14233] Possible unsafe locking scenario: [ 526.435582][T14233] [ 526.443039][T14233] CPU0 CPU1 [ 526.448412][T14233] ---- ---- [ 526.453785][T14233] lock(gdp_mutex); [ 526.457691][T14233] lock(cpuhp_state-up); [ 526.464549][T14233] lock(gdp_mutex); [ 526.471064][T14233] lock(&root->kernfs_rwsem); [ 526.475838][T14233] [ 526.475838][T14233] *** DEADLOCK *** [ 526.475838][T14233] [ 526.483975][T14233] 8 locks held by syz-executor/14233: [ 526.489344][T14233] #0: ffff888033eee428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 526.498248][T14233] #1: ffff88805da08c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 526.508006][T14233] #2: ffff8880278d5d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 526.518024][T14233] #3: ffffffff8f1c8968 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 526.528302][T14233] #4: ffff88805b0590e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 526.538840][T14233] #5: ffff88805b05f250 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 526.548870][T14233] #6: ffffffff8f953688 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 526.557779][T14233] #7: ffffffff8ef181c8 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 526.566946][T14233] [ 526.566946][T14233] stack backtrace: [ 526.572841][T14233] CPU: 1 UID: 0 PID: 14233 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 526.572861][T14233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 526.572872][T14233] Call Trace: [ 526.572882][T14233] [ 526.572890][T14233] dump_stack_lvl+0x189/0x250 [ 526.572919][T14233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.572943][T14233] ? __pfx__printk+0x10/0x10 [ 526.572967][T14233] ? print_lock_name+0xde/0x100 [ 526.572990][T14233] print_circular_bug+0x2ee/0x310 [ 526.573013][T14233] check_noncircular+0x134/0x160 [ 526.573036][T14233] validate_chain+0xb9b/0x2140 [ 526.573058][T14233] ? lockdep_unlock+0x89/0x120 [ 526.573072][T14233] ? validate_chain+0x897/0x2140 [ 526.573096][T14233] __lock_acquire+0xab9/0xd20 [ 526.573115][T14233] ? kernfs_remove+0x30/0x60 [ 526.573130][T14233] lock_acquire+0x120/0x360 [ 526.573145][T14233] ? kernfs_remove+0x30/0x60 [ 526.573166][T14233] down_write+0x96/0x1f0 [ 526.573180][T14233] ? kernfs_remove+0x30/0x60 [ 526.573196][T14233] ? __pfx_down_write+0x10/0x10 [ 526.573210][T14233] ? kernfs_root+0x1c/0x230 [ 526.573223][T14233] ? kernfs_root+0x1c/0x230 [ 526.573235][T14233] ? kernfs_root+0x1c/0x230 [ 526.573248][T14233] ? kernfs_root+0x1ea/0x230 [ 526.573262][T14233] kernfs_remove+0x30/0x60 [ 526.573277][T14233] __kobject_del+0xe1/0x300 [ 526.573302][T14233] kobject_del+0x45/0x60 [ 526.573323][T14233] cleanup_glue_dir+0x1a3/0x220 [ 526.573340][T14233] device_del+0x76a/0x8e0 [ 526.573358][T14233] ? __pfx_device_del+0x10/0x10 [ 526.573372][T14233] ? netdev_unregister_kobject+0x344/0x450 [ 526.573393][T14233] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 526.573419][T14233] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 526.573437][T14233] ? net_passive_dec+0x167/0x240 [ 526.573465][T14233] ? __pfx_net_passive_dec+0x10/0x10 [ 526.573484][T14233] ? rtnl_net_dev_lock+0x36/0x2f0 [ 526.573508][T14233] ? nsim_destroy+0xe5/0x670 [ 526.573532][T14233] unregister_netdevice_queue+0x33c/0x380 [ 526.573551][T14233] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 526.573572][T14233] nsim_destroy+0x1dd/0x670 [ 526.573594][T14233] ? nsim_dev_reload_destroy+0x288/0x490 [ 526.573610][T14233] __nsim_dev_port_del+0x14d/0x1b0 [ 526.573626][T14233] nsim_dev_reload_destroy+0x288/0x490 [ 526.573643][T14233] nsim_drv_remove+0x58/0x160 [ 526.573657][T14233] ? __pfx_nsim_bus_remove+0x10/0x10 [ 526.573679][T14233] device_release_driver_internal+0x46f/0x800 [ 526.573699][T14233] bus_remove_device+0x34d/0x410 [ 526.573723][T14233] device_del+0x511/0x8e0 [ 526.573739][T14233] ? __lock_acquire+0xab9/0xd20 [ 526.573755][T14233] ? __pfx_device_del+0x10/0x10 [ 526.573773][T14233] device_unregister+0x20/0xc0 [ 526.573788][T14233] del_device_store+0x2aa/0x360 [ 526.573810][T14233] ? __pfx_del_device_store+0x10/0x10 [ 526.573832][T14233] ? sysfs_file_kobj+0x1e4/0x230 [ 526.573853][T14233] ? sysfs_kf_write+0x166/0x260 [ 526.573877][T14233] ? __pfx_sysfs_kf_write+0x10/0x10 [ 526.573898][T14233] kernfs_fop_write_iter+0x375/0x4f0 [ 526.573920][T14233] vfs_write+0x5c6/0xb30 [ 526.573940][T14233] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 526.573959][T14233] ? __pfx_vfs_write+0x10/0x10 [ 526.573979][T14233] ? do_sys_openat2+0x154/0x1c0 [ 526.574007][T14233] ksys_write+0x145/0x250 [ 526.574025][T14233] ? __pfx_ksys_write+0x10/0x10 [ 526.574044][T14233] ? do_syscall_64+0xbe/0xfa0 [ 526.574067][T14233] do_syscall_64+0xfa/0xfa0 [ 526.574088][T14233] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.574110][T14233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.574126][T14233] ? clear_bhb_loop+0x60/0xb0 [ 526.574143][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.574158][T14233] RIP: 0033:0x7fbfdb78d69f [ 526.574173][T14233] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 526.574187][T14233] RSP: 002b:00007fffd851b5f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 526.574206][T14233] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbfdb78d69f [ 526.574217][T14233] RDX: 0000000000000001 RSI: 00007fffd851b640 RDI: 0000000000000005 [ 526.574227][T14233] RBP: 00007fbfdb8130c1 R08: 0000000000000000 R09: 00007fffd851b447 [ 526.574238][T14233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 526.574247][T14233] R13: 00007fffd851b640 R14: 00007fbfdc4f4620 R15: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 526.574265][T14233] [ 527.093654][ T5186] Bluetooth: hci5: command tx timeout [ 527.142695][T14337] netlink: 'syz.8.2425': attribute type 10 has an invalid length. [ 527.162967][T14337] lo: entered promiscuous mode [ 527.203874][T14337] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.541682][T11614] ------------[ cut here ]------------ [ 527.547304][T11614] WARNING: net/xfrm/xfrm_state.c:3306 at xfrm_state_fini+0x26d/0x2f0, CPU#0: kworker/u8:0/11614 [ 527.558191][T11614] Modules linked in: [ 527.562123][T11614] CPU: 0 UID: 0 PID: 11614 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 527.571937][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.582308][T11614] Workqueue: netns cleanup_net [ 527.587406][T11614] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 527.593231][T11614] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3b 06 f6 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 69 46 d6 f7 e8 54 00 92 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 46 00 92 f7 90 0f 0b 90 e9 60 fe ff ff [ 527.613655][T11614] RSP: 0018:ffffc90003cc7878 EFLAGS: 00010293 [ 527.620378][T11614] RAX: ffffffff8a2f0b8c RBX: ffff88803270c880 RCX: ffff888030485a00 [ 527.628703][T11614] RDX: 0000000000000000 RSI: ffffffff8c04fde0 RDI: ffff888030485a00 [ 527.637025][T11614] RBP: ffffc90003cc7990 R08: ffffffff8fe52937 R09: 1ffffffff1fca526 [ 527.645020][T11614] R10: dffffc0000000000 R11: fffffbfff1fca527 R12: ffffffff8fa4c780 [ 527.653343][T11614] R13: 1ffff92000798f3c R14: ffff88803270dd00 R15: dffffc0000000000 [ 527.661896][T11614] FS: 0000000000000000(0000) GS:ffff8881257bd000(0000) knlGS:0000000000000000 [ 527.671927][T11614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.679260][T11614] CR2: 00007fb14a2ec368 CR3: 000000000e338000 CR4: 00000000003526f0 [ 527.687577][T11614] Call Trace: [ 527.690873][T11614] [ 527.693821][T11614] xfrm_net_exit+0x2d/0x70 [ 527.698937][T11614] ops_undo_list+0x49a/0x990 [ 527.703575][T11614] ? __pfx_ops_undo_list+0x10/0x10 [ 527.709026][T11614] ? do_raw_spin_unlock+0x122/0x240 [ 527.714270][T11614] cleanup_net+0x4c5/0x800 [ 527.719059][T11614] ? __pfx_cleanup_net+0x10/0x10 [ 527.724041][T11614] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.729846][T11614] ? process_scheduled_works+0x9ef/0x17b0 [ 527.735614][T11614] ? process_scheduled_works+0x9ef/0x17b0 [ 527.741687][T11614] process_scheduled_works+0xae1/0x17b0 [ 527.747566][T11614] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.754044][T11614] worker_thread+0x8a0/0xda0 [ 527.759544][T11614] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 527.766203][T11614] ? __kthread_parkme+0x7b/0x200 [ 527.771430][T11614] kthread+0x70e/0x8a0 [ 527.775532][T11614] ? __pfx_worker_thread+0x10/0x10 [ 527.780698][T11614] ? __pfx_kthread+0x10/0x10 [ 527.785314][T11614] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.790595][T11614] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.795863][T11614] ? __pfx_kthread+0x10/0x10 [ 527.800497][T11614] ret_from_fork+0x47c/0x820 [ 527.805110][T11614] ? __pfx_ret_from_fork+0x10/0x10 [ 527.810323][T11614] ? __switch_to_asm+0x39/0x70 [ 527.815108][T11614] ? __switch_to_asm+0x33/0x70 [ 527.820013][T11614] ? __pfx_kthread+0x10/0x10 [ 527.824634][T11614] ret_from_fork_asm+0x1a/0x30 [ 527.829461][T11614] [ 527.832508][T11614] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.839804][T11614] CPU: 0 UID: 0 PID: 11614 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 527.849378][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.859544][T11614] Workqueue: netns cleanup_net [ 527.864356][T11614] Call Trace: [ 527.867662][T11614] [ 527.870604][T11614] dump_stack_lvl+0x99/0x250 [ 527.875221][T11614] ? __asan_memcpy+0x40/0x70 [ 527.879847][T11614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.885083][T11614] ? __pfx__printk+0x10/0x10 [ 527.889708][T11614] vpanic+0x237/0x6d0 [ 527.893703][T11614] ? __pfx_vpanic+0x10/0x10 [ 527.898207][T11614] ? is_bpf_text_address+0x26/0x2b0 [ 527.903412][T11614] panic+0xb9/0xc0 [ 527.907136][T11614] ? __pfx_panic+0x10/0x10 [ 527.911563][T11614] __warn+0x334/0x4c0 [ 527.915551][T11614] ? xfrm_state_fini+0x26d/0x2f0 [ 527.920494][T11614] ? xfrm_state_fini+0x26d/0x2f0 [ 527.925436][T11614] report_bug+0x2be/0x4f0 [ 527.929772][T11614] ? xfrm_state_fini+0x26d/0x2f0 [ 527.934712][T11614] ? xfrm_state_fini+0x26d/0x2f0 [ 527.939656][T11614] ? xfrm_state_fini+0x26f/0x2f0 [ 527.944599][T11614] handle_bug+0x84/0x160 [ 527.948845][T11614] exc_invalid_op+0x1a/0x50 [ 527.953350][T11614] asm_exc_invalid_op+0x1a/0x20 [ 527.958206][T11614] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 527.963763][T11614] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3b 06 f6 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 69 46 d6 f7 e8 54 00 92 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 46 00 92 f7 90 0f 0b 90 e9 60 fe ff ff [ 527.983380][T11614] RSP: 0018:ffffc90003cc7878 EFLAGS: 00010293 [ 527.989463][T11614] RAX: ffffffff8a2f0b8c RBX: ffff88803270c880 RCX: ffff888030485a00 [ 527.997445][T11614] RDX: 0000000000000000 RSI: ffffffff8c04fde0 RDI: ffff888030485a00 [ 528.005419][T11614] RBP: ffffc90003cc7990 R08: ffffffff8fe52937 R09: 1ffffffff1fca526 [ 528.013394][T11614] R10: dffffc0000000000 R11: fffffbfff1fca527 R12: ffffffff8fa4c780 [ 528.021368][T11614] R13: 1ffff92000798f3c R14: ffff88803270dd00 R15: dffffc0000000000 [ 528.029349][T11614] ? xfrm_state_fini+0x26c/0x2f0 [ 528.034299][T11614] ? xfrm_state_fini+0x26c/0x2f0 [ 528.039255][T11614] xfrm_net_exit+0x2d/0x70 [ 528.043678][T11614] ops_undo_list+0x49a/0x990 [ 528.048279][T11614] ? __pfx_ops_undo_list+0x10/0x10 [ 528.053401][T11614] ? do_raw_spin_unlock+0x122/0x240 [ 528.058615][T11614] cleanup_net+0x4c5/0x800 [ 528.063038][T11614] ? __pfx_cleanup_net+0x10/0x10 [ 528.067982][T11614] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.073195][T11614] ? process_scheduled_works+0x9ef/0x17b0 [ 528.078927][T11614] ? process_scheduled_works+0x9ef/0x17b0 [ 528.084653][T11614] process_scheduled_works+0xae1/0x17b0 [ 528.090220][T11614] ? __pfx_process_scheduled_works+0x10/0x10 [ 528.096216][T11614] worker_thread+0x8a0/0xda0 [ 528.100816][T11614] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 528.107154][T11614] ? __kthread_parkme+0x7b/0x200 [ 528.112099][T11614] kthread+0x70e/0x8a0 [ 528.116180][T11614] ? __pfx_worker_thread+0x10/0x10 [ 528.121298][T11614] ? __pfx_kthread+0x10/0x10 [ 528.125894][T11614] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.131105][T11614] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.136308][T11614] ? __pfx_kthread+0x10/0x10 [ 528.140904][T11614] ret_from_fork+0x47c/0x820 [ 528.145500][T11614] ? __pfx_ret_from_fork+0x10/0x10 [ 528.150618][T11614] ? __switch_to_asm+0x39/0x70 [ 528.155394][T11614] ? __switch_to_asm+0x33/0x70 [ 528.160168][T11614] ? __pfx_kthread+0x10/0x10 [ 528.164771][T11614] ret_from_fork_asm+0x1a/0x30 [ 528.169549][T11614] [ 528.172917][T11614] Kernel Offset: disabled [ 528.177249][T11614] Rebooting in 86400 seconds..