last executing test programs: 28m24.046204375s ago: executing program 32 (id=1690): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b"], 0x118}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708000b0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1}, 0x400a044) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 24m25.157940553s ago: executing program 33 (id=3713): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0xe1, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x2, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0xa}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x1, 0x3, '/'}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x3, 0xc, 0x4, 0x1, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x2, 0x3, 0x59}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x0, "9b5812"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0xfc, 0x4, "b7a48dc0c4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x7, 0x3, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x4, 0xa, 0x2, "b8add67bb7457d4b9a"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x9, 0x81, "837be04fad9795b6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x5, "48c4"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x8, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x4, 0x1, "77b6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x80, 0x0, 0xb7, {0x7, 0x25, 0x1, 0x80, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x8, 0xfe, 0x10}, 0xce, &(0x7f0000000180)={0x5, 0xf, 0xce, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2c, "ef58aad626e844ce9440828e90a28356"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x1, 0x7fff}, @generic={0x9a, 0x10, 0xa, "0235bcc9807b756547bdac9fe754696b4dd0a87c3013ab388bbed6abd033732060f031a2c9e10406fc25840d5006c5b5223a7669d77f0cd4c2cc57ff5e36a9a212ab52adfa955dc26f1f96d39b328aed22591ae38608eed728bf4dd5cf4c831770621ad469b9505213b44b84648a8c6f21c3bb72361c4942020972c4553a482cd59f23c8438f79101bf04ad18e75c543087bdc1c952351"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3063fbaa2ca0dc875baf4e3fb9077e89"}]}, 0x4, [{0xfe, &(0x7f0000000480)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}, {0x7f, &(0x7f00000002c0)=@string={0x7f, 0x3, "6c81c55077d26c5efaa6661e14ef486121e66b5c6dbd9fbad7a686a7244bfc20cc203cbaafa602cc04b059a6c3b9aaf6d708684cda36dd7ecb053f90a5e8a196e8df66954fd31df83dccf9b6256cc904287196da4f37e2edfabd5ffb0e3ec3dd36733dd3df35994bdb83e20ff71632e0ed31c3f1184e582eb67cbca437"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 20m13.339156837s ago: executing program 34 (id=5321): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003300000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131"], 0x184}}, 0x0) 20m4.739808894s ago: executing program 35 (id=5352): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioperm(0x3, 0x7, 0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = epoll_create1(0x91caa68f2fd717bd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="47a6fcf4bb53631e63c6a40bd4c3e1d47cd52b43c47d65ed912db50abbb45ddf38da57ce50b864f7740164ec5101ddcb46f61cbc99270eb7d5d073be05fe421f2ecb540dc564047f8036d9ad3391089b14bad16cf5bbf5ddbc5975183907226920b402e6df1707a9e35c8a537f12bb0b184b71990601468cd391c9a64063b5b1ed3ca3d13909c65ff333621df9db8d79f45146ef4c403bc48f72c04af77d4d99badf2c85b4f5968e5e7d1fa2bc92ee41022b94947f4bdc7eae8e4e7c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010010ff8236000000000000000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000000000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a91fe6072df9c2fad"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_pidfd_open(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) 18m8.272740815s ago: executing program 4 (id=5908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f007068793120000000050020"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x3, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48004448}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x94, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r9, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x2b}, 0x90) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r1, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xec}, @mss={0x2, 0x5}], 0x2) 18m8.185879458s ago: executing program 4 (id=5910): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x40103) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x1000000, 0x29, 0x7, 0x1}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x4461, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x8, 0x4007f, 0xffffffff, 0x6, 0x6], [0x10000, 0x3, 0x2, 0x400, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x100, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xffff7ffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x5, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0x6, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x7d, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x0, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="000002030300000000000000000000040000"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000001140)={0x0, 0x0, @pic={0x5, 0xc0, 0xb, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7c}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x203, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9e}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x814, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f0000000280)={0x26, 0x0, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 18m6.373950712s ago: executing program 4 (id=5920): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7f, 0x20203143, 0x0, [0x2]}) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18m6.306701387s ago: executing program 4 (id=5921): r0 = syz_open_dev$media(&(0x7f0000000080), 0x77, 0x44080) r1 = syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r4}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000280)={0x18, r4, 0xf, 0xe3}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x3, 0x0, &(0x7f0000000c00)=[{}, {0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000ec0)={{0x0, 0x27, 0x3, 0x0, 0xba1d, 0x3ff, 0x5, 0x6, 0x6, 0xa, 0x1, 0x4, 0x6, 0x1, 0x401}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001ec0)={0x0, r6, "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", "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"}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000e80)={{r5}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000100)}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffdcb}, 0x200008c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04169e49a60eaa2beee5e34284273c081b06aaaaaaaaaa10"], 0x9) 18m5.688564602s ago: executing program 4 (id=5926): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x59749000) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x800) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) poll(&(0x7f0000000100)=[{r1, 0x2002}, {r1}, {}, {r1, 0xc000}], 0x4, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2e9c849ddf3446dd}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=@expire={0x2c8, 0x18, 0x10, 0x70bd2b, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @in6=@mcast2, 0x4e21, 0x5, 0x4e24, 0x4, 0xa, 0xa0, 0x80, 0x0, r2, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x6c}, @in=@empty, {0x9, 0x7, 0x2, 0x6, 0x8000000000000001, 0x7, 0x7, 0x8}, {0x10, 0x1, 0x9, 0xffffffffffffffff}, {0x1, 0x100}, 0x70bd2d, 0x3506, 0x8, 0x2, 0x9, 0x10}, 0x7f}, [@algo_comp={0x73, 0x3, {{'lzjh\x00'}, 0x158, "1837f2e13ad01e187b27b0a68543f3452ae4be735d723f82ac4866d3c8a2f2ad92cebc0e1da6e6c06ba7f3"}}, @policy_type={0xa, 0x10, {0x1}}, @replay_thresh={0x8, 0xb, 0x160000}, @srcaddr={0x14, 0xd, @in6=@private2}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e20, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @algo_aead={0x115, 0x12, {{'morus640-generic\x00'}, 0x648, 0x180, "9e73005676041ebac9e09c297d47f97996f752f38628b8326961a4883a9c506027caecd26f4f76d654cefe6929e3af181a56a49543b7e376d369d709dd79de004ff6c6a44d8b2e4ff0db719540820e965c1d80e1861ee9b003da016d3e73fab61f1ff517fc27ea9f370a3dfc98b41c0097a9d43a2f578d5cc9fb41901bff1363976ccd455b1df315f588157f8b134d54d57601cb293fc643142076950f9c1c5b040c9f4be94f9f1ba0b2f046428538430f56f5fbd379b708914a0b0aa742c83f2d00907a179762987b"}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40}, 0x20008008) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000540)={'syztnl0\x00', r2, 0x1, 0x80, 0x44, 0x2, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @broadcast, {[@generic={0x82, 0x12, "130f162fb29db7b3dbcfe42c443b50f3"}, @ssrr={0x89, 0x1f, 0xa7, [@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @remote, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @generic={0x82, 0xa, "7d658418d9e23b43"}, @timestamp_prespec={0x44, 0x44, 0x6c, 0x3, 0x9, [{@loopback, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@private=0xa010101, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@multicast1, 0x101}, {@empty, 0xe4}, {@local, 0x3}, {@empty, 0x8}]}, @timestamp={0x44, 0x20, 0x32, 0x0, 0x2, [0x3, 0x5, 0x5, 0x7f, 0x2, 0x3, 0x7]}, @generic={0x94, 0x9, "b071cd9899322c"}, @rr={0x7, 0xf, 0x6c, [@multicast1, @broadcast, @broadcast]}, @lsrr={0x83, 0x23, 0x42, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x12}, @remote]}, @noop]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000006c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x57, r4}) r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) socketpair(0x2a, 0xa, 0x3f02, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r8, 0x1, 0x70bd2d, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040018}, 0x4000805) r9 = syz_open_dev$vbi(&(0x7f00000008c0), 0x2, 0x2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000900)={0x40, 0x5, 0x5, 0x8001, 0x17, "e929bd74d13a374b794cc5c64a7c69fe707c0d"}) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000001980)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000000940)="5fe95bdf4d6ca852fbd5d2835769e127cb48b864485f87ba40ff8773f68b0f229f4eab05e6a7aec2681b448e46cc4ba553d330d4506cb559b6f59aae8d0d01ee401bbc4fded9dc2a580945bc485718c2ff934888ff4d09d7766178efe5e22400c5460e2271bc55aa883d3d3a289ec407831e3c7b063b9c894c711b31b9f5714c745b6332046d7376507843db15766cd2708f14bcb61d64e09524c6b2e09e2a28d6bdd629333088d181e605994d47235d8bf7878a40ff43696133abbbf537a1ded4682242decce89bcb4df1b4dee3ea08797e1cecf429e68d4911d3da2d1115021bdc00489b2ecd4972904d9970c80ed70d4404b36eeec6403d7729a512acbf468b45cf8f5d8324210b0b0e19c372544340a162d065ae0343843ba9548b6b5290471811985c33c9a546df8b775f38bd4780b900111ff3d39c963a0fe90ad5c523d47402330a55bac0b49271d6d9413f47d78a1ac2806ddf384aeeca2352841100970be4f88b68191d834c2b6a9d306e70848884454974349a2f9fdb1f49dd5665b63e78952249c2df87444b4d63c30948cc74465f30562835756ed7d5912a21e2d456cb1feb7d0d5b8fa1abf0fbad170953a02a85633c51414604ff82015ff35f14c99346c04534dba358aa31a44bdb6136e58c6a34d80c98a80dce9e32cd56ef15e06fb6979bac3a4ad31a11225207066215450bb0ac499b6a4fa023b06ea3c86b5cc0607a9e6ce6fd7ce303e2b6631a166440da54fe5a453bb7fc4b27ff4b27d9a1669c71d38a66dd21e310627d2ae125d9936ada0a028c2b1f4874a01cad8e82b8047a5ee4ba1e1800397f6618e9a863945fafc77beef8353424b76963989e31326a682e28c0db0d1d72218d33abdc49506f2c581223591c0bc021f6ad530dbe308d6bedf8379db5732d21ec9583a939e612c802d7a279d422f2d95a64b1496389c424390c80803ebb2b1f2ca9ec20751ddeca6df45483bd089191d31faedc4f62c39b42b8e6da7f833e2821c667777e504499815ccf804cbf8a642616974fbc9a1890d7a74f5d11ece8e3159fa0c67f299c25d3fb7c425e1086fbb04d7bdec4393f793c397eca8270e8ed6ad3cc2ebff3e70060bd08ce1aa938d83b8494378338a71fa63c9a25932c6bda2e1208c4a5f58d5bc65761d477b1fb1121777f45bd25212e98a754751c78b9b93caff4bad2876c73682424f89542a54b2b265e74ee3224bc33ec9cf903444ee82abea7d8409302cf16326c4417b772fe8ddfc4f3f45ae9cc5f22b76939a8821f5ab4f4d4c6bf42ac5ec194cdd8c55d37f7b1b8581d3c1a1d1dbc98570c45f9cc1a99ac88d47d4b44921945cb6f09de7da33daa842c591669338711d8d0e8722fc242903364d4a80d10775215795aa38805772b1db5f6e666e2443b56c5980ced272f5e64c302fa48e6ffdcc4cbe8c17a0e3681751d4a4987a2e1570be40a0182a9c757cf7eeebfa2b58e7ac4ce81f2ea4c5e32e0f85239a8469498ab27c4dadd2416e5cb1c0fa2dbf7b3d5433361cb9ea885011da415ab24f67291aba792c21e63297ee25b0331d1dbe143bec4bc9b6928e0775f1793e8e711d50b2275794588018f4074d92f0c78bb8e31d8b1008f76e876e58079a63074a3a1984a66fac7d47bb7c0e9cc88c5c3d662aee389811c233c0842778dcb3aa09119dfadcd1144c350e05a1cec7debe1980cb4ce8c31fd622fb338ddbb3ee57a6d52f453e9e12a6cb14f1af3d59c866e7c56e02ee4900a69dc154f4f63f23f950547140889a77c8f1d89206403c8bfe83e85be1079b7716752d879c2ee8727335566801b80f708ee23fb57f792fc15b77cf7651413769cd5a158a4a731428a015b9b69f9480da913b0b3d5b0313decba051515e56ab12800f3bb65a165349f7a834610e62f1b45e03d494c8047413a7f2072b5f0bb2e8e726cdf07431c9b7c6e0b59acc52fadaa063df40f3752fe9348a519a325cbae51800c96c7c3ad814eb3b556b3c5051cdbbe88f03b8b750701f6cc047510fb620be84cfbfd7d0fedb75d6b2ad7cb5b423a59d330c215fef93ea2c5b61175ef735d70eaae55494e11391fce3505b812da192821d78c7871be0efcacd9970c0a5bdfb74b75420f4ebe68e59134c01ad666b0651dd1e9160fa59f9e569915eccde7df7341d6e13ea11de5dda4d6ddca5672838b01ff604e403acbb94c9a32ef245f74ab2ccd808350a866483e8ecf35fd86a55e17328b087bd94f9a78adb1e354eb96af8adbd08aa717a4cfff416cda7d769f4f2f522029a4607d857a600bdccff0955417bebe69cb91c8dd61777e99fbbdb0383ac3af8632db3e31fd851e7b462297f7646fd5078a8ca6dadd3dc4cbe9a58b7597f161e4d3505d46668b9ae726d0ba8343890edfa0212bf8695daf1da3be806f12cbde598141bf933faee99c88f7ab62394b90daa8e7e15078d0d887ee35fc5f002b232f785a8af5ad000db6b8a151019e0657061fa132b19e4524fd06d12f5b6f0b5f0f9713823e484018499bf38aec6d604876e1494631b83546e3fe12aa2f539cf2cebb8cff7de958a46afb53d5b33e39dc1c8d26b4380c41ed1bd04fcb26fb46c1551fd717e29f1ebcb3c607f082746781eefbbb6f55e28db63b8ad07ab338ab40d4526600e254bd51e592eedef228a9140eb0cb94d2ecfa7c8bd3d7dfb94f6eb55066e04845d4c68c920f97925290de6be1c8bcdc99cc667f6689ef3548ab3a2006447646abeff3232f7c12a57f31fc93c71872cae08d7772c9026cb0f8cd900a5520daa04b6b1e4e6b4b3130ed4f190efbf5fdafcaecec74194a33fde8574982e3d83c30866a1cf6a43540b508f5c7efd1b0c60e3f4c61c512d39360d9f2d991cc0d2198feb613551f5f12ba7c576d896ffc4e71ed69200b748bd64c5d1d3075477020ec0be7c9aa36565b8395dea9e540dff5abceb2ef11b745157cf78acbb24eda9b236112a34df776b007169c3e550f1487bda8175f38931a766c0e545e7d91949b59c5eef87984226a43bc8919e9e1f23844a4b93287a758167adff189f755487c85e06c1eeaa1eb48830b87cff106f9cc2986d3a4fb8919b5f5aa841be7e6ba185755477e49d4511f9ec0247cc4c81ee84646ec5bcda1a51b62d5d15126382896f74441985341ba98c0c8b68bfad6e6e9b701c3eab84929fc696bb1fea040d6332ead500a68ba3be22a62582c500d6f7f160dc42fe7e049c0b54dfa57abc2210e0d74cbe648ebe28e17a46300b932ed3819015c6531f8dde082cc4735c70ab0bce1b19c53bd946b373886a8ad0a1e2e517164dcc051996b52ba83c001d85d9b69ea58cec0a6c95996171afde2d1d2f00c4dc1a736a154c8a60c7622fc4ded2296c605e92fa9d486a563d96e9dd45fdadbcc11fb35db7897cd9997587ce7a46ef2b52dfd5e9c83fb2ec9b919cea5847bfdb591225a39bbf0b66e7f51482511dd10afc9a59057c29009386a11060ae3a12a6d3ae2feb9d4a4ccd3d76b6551172f1ecb9a033e406090840e8a7ee660d603bc68e33fbd242619995210366cdc60b62f2f8cc84f7cc8e0bb4efa4a1cdf69fdb3cdfb13d071f1aa712ad59c79329584b62b0600e75e63f2ef40e74a8d1fc434ecef9aec3db04b589386e4346d55da0d8e848520aad17d2a0eced2e65530bc086086ce9d116c07c769208fcf2b90e25b5ed7db80d26486d9215bb04aafd38924a9a937ba93d37a5db96f09f48faedef3880b03d5fc560167832263e4ac6b4a3b94843025f4a334aad3038009e4e4457fc7e6b3dba66c32d31a6278413ebcc7991ac0681d0e15e19877255484cc1c7f209e5fc7356f51b06bf8cd0bbda65839989bb9c628de247238fd178cc88e979e7efbef5c325c82db3ee8895df05546434f73c385cd8be599760a63ff13753ba852899cd502295f106e9da4d9df2873d52ce0b50330c3d9957dd666d31531039a81540815795da4c21149314e526142517ecafc1861ce88047f54c4113870c6475a2b3030333f7f6be4185b3d702e443cc4c590486fd8f3fa79947a7fd1869607f0360dd6d906cca7e9f1cb78bc2038ff61726c9b0a67b2ae478f6e5508f671f498311e741d027fb608755dd209adc29c170d89676906f534e1ea4f6999abb71c061d452183e3890f6ce35aab2d13031397f02bc3742d3fd7858e9d227a1a9c583184738e29c3d86f78b0912337559e0c8c6d6006fed7c31a56776ff0070a937ad05fa0a2f6d1b2aa179cd786299cee72794a0dea920dd41aa8d780e2d9d8f9b53605a1c0e36a0ee0c740c47ccdb8f9b7a6071bbe2f3ce550c6dd1cf622043950e6dca95a938886699fb54077da1f14a5c5ef8eea133231498fe4209db3a378716f4965ff56a22e19888dde42f89846c903c30f70ee57669904362892aa4c8ffa6bf3515898eca0d4b6c88ec49cb1ef93babe3121a64af7761814c768f2efb5bdb68d786d8369cba59d8776b8e327baa5e087cb0ab2cd4dd7498f5991405f87cf2b9c92a9123b831f43b0bc35bfca68bf7c8cece332f0ea50788c7329d7bef65e726eccab96d8b318f9e03fe8d14da4c002dbbb2d22fc3d3628e7ba85b2e63391949771350354d82b9d78db539c7254cf0e548fc6979a065d7e1a1ce16a0ee26e3960fde890fe3fa8340a4fc12096a093cff66ebecff94ca758ed954949ea37195605cf512e81ec504894e8da9d7a3ed2eb9fa3d238b8fabe67b742080572be92a0b44bc046960e6f31184211f3fae6c8e533ce328b3b3ba424eb8cf2b833419953a098129a4d67d536a90f08ba1d22bbdb21f6811c71821eaa1c9ba4f59f4c70e7c3d3ab7e4b0d09bf4a6219c934403387b2a5d93c0c6d4af96299af28a96f15d111b8fe4a313831f0a5cdcac0849c4c94bbe402820536fdb4bd2f8ebb55d158f68a63c6e9fe98d44244052f4a10be58d0df0ad7134987fba7673647de42413cf1214fd830a1b246ab85bac33375824b9e1effdb3bf889ba15ede274ff548e5aed547613a920aa7240d8c64af56d22795f65247215d0d6c436d22cc9dcbcefd21743859882a868c458e910cc9ee7f6c387b60bcd28f29c42c8b784efe530f50e318c4199a3eb62125a3e3d6ca5f4e438ddad9fdece1bb0b647b2fa1ce9ecb01cce86f4b29c991c03e5e8685aaab1ebe7a16e5fc84e7f9d2eb2539f310df36e0898857b8a09a2db21d4eb9475c40a44116076ade7deaf949deee0e816bd42a6b07decb2fb7c6a25f6d8d8a591476f7373d8e182a756b1ca3d68193777164f7f083fe5147dee22daedc54381cc3fabe88c1728ab0a11e175b1e809acf81e00cd74e5494c8e40deef25831e201a6f99e822c4bd2c01a67d79fcd60517fb23bb44aee731c71116bf18cc6ad222a13e67130be7da37a804947022ffb4029e08ebcc95e82b11bb4ac9e9d0a576bafe17807df1add370a794c0df91ac126fc3b2d2788b5bf8eb0f22001d3abba40a21623a000363c153d934aa48e02d771fa77a87621e99db9630dd0dc3e5c197741bb38a807f133d45c4ace84174f07a31b144e2cb41ed70bf8e4a3ad0e5c29b2d3dac4bc65aa73b57b442046142d816f39ae7829de5c6ac37f47eec1ec6b530f1db10a30b8be34c1e3d37b70f49e265cb5dc58908c71471f31cf4be8601e77721f195380b5b29356731ee7040840960e7776b8c1cd04febd329551fea35fc4b23752c5e3354268a23889aad29e9871dcd49c4deaeb9347cbb7633dfaf69a2a4cfd780c007d86acb3349174cbccc8a9a60def610c009954ba021a79c68b36704e34caec7449d", 0x2, 0x0, &(0x7f0000001940)="2405"}) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000001a00)=@req3={0x6, 0x3, 0x2, 0x8001, 0x73b6, 0xf3, 0x1}, 0x1c) r10 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001a40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0xa6, 0x1, 0x3, 0x1, 0x1, 0x58, {0x9, 0x21, 0xd72, 0x3, 0x1, {0x22, 0x88c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x40, 0x7f, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0xa6ff099d8f11f3ec, 0xa8, 0x10, 0x2}}]}}}]}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x201, 0x4, 0xd, 0x8, 0x40, 0x79}, 0xb9, &(0x7f0000001ac0)={0x5, 0xf, 0xb9, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xfa, 0x7b, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x7f, 0x3, 0xfffe}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x39, 0x5, 0xf2e5}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x6, 0xf00, 0x7, [0x0, 0xc0ff, 0xff00, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f501837c6b78afd382c4557bab5de8de"}, @generic={0x65, 0x10, 0xa, "6338be2e209563287df2509ef8b1710906c07284c35ef2fd6015bd57030986668d8a749ec1ff66f78ed219d0aefe038fa4cbb11e325bf17c25af3792ad7643e2f783d12ba6afebc2046babd0ed52499be189296080d062b409491bf02cdd7f667ca1"}]}, 0x5, [{0x9b, &(0x7f0000001b80)=@string={0x9b, 0x3, "fee7b63231ce2be6826006e2ba66554dd07dbb8336a3ec02bf65293567319291c769b12975f81d682121074191447ea6dcefb97e6a3b7abc542e0b2dd18ec3a70716d48ab28ed7bebf8271fc2dc029715c200a100ca4d148d655b1dedee25dfd968e36bce8c2713f38f4b5d39a22b26f12a3d5951ce5cecb535e3ea2a2c1e0046eec1e08c050b227acb533953fff2ee95858dd826af90416f7"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x416}}, {0x5c, &(0x7f0000001c80)=@string={0x5c, 0x3, "32f8a78bf18d80aefcc68bea9a27c9b382027f415e2a2156e18933459d6fcafc1bec1112f83bd125039924106b35d931d06eabbde6538a39d4b1b45fd53b963c96830224c2e6e1b9a30581c922f6e995b644958dc6672efdc241"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x180c}}]}) syz_usb_control_io$hid(r10, &(0x7f0000001f00)={0x24, &(0x7f0000001e00)={0x40, 0x7, 0xd, {0xd, 0x21, "c09e462de282ac14cc1a9f"}}, &(0x7f0000001e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f0000001e80)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x9, 'F'}, @local=@item_4={0x3, 0x2, 0x9, 'neg]'}]}}, &(0x7f0000001ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0xb0, 0x1, {0x22, 0x285}}}}, &(0x7f0000002100)={0x2c, &(0x7f0000001f40)={0x40, 0xb, 0x66, "9215ac2366da5f268d1867c627e9dfaffacabeb5b5cd0b9f048c3b4c7fa15d3f3d3fd70ff736ca4b37af57a65567a95ef56fadd6a707007bcc61b8c6208b3241be604ce3a19c925d7d95bdd8e02dcf242e3dac1db7763ff0515e1b96d592a65c17ed5646d174"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002040)={0x20, 0x1, 0x3c, "74166f862adbb54dd9246cbad64f8f4f5d1148b473ee3e0bb80e8eed491a77d226172d4a73dbe6543c46fecf6eef6f46045a622f7251f70041e41b94"}, &(0x7f00000020c0)={0x20, 0x3, 0x1, 0x7f}}) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000002140)="5131d5eab407f492f7315ac4efccc83ec8eca1980de5bc054883d48d2e236fb17923e950e1eba5b606671f39fd0ed79c399bc078ddeec8f4033636ce5e96f09f4b41931c87893cbc4b1454f86c278f3f42dcbf455100d0020b50fa3473e88ebe0aa588f95db26d496da89dbbded1620b3909352c2568e0676cdb97d1", 0x7c) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r9, {0x8}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r11, 0x8008f512, &(0x7f0000002200)) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, r12, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0xc000) 18m5.395093827s ago: executing program 4 (id=5927): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3fb, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x1000}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) 18m4.879878764s ago: executing program 36 (id=5927): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3fb, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x1000}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) 14m55.590380529s ago: executing program 8 (id=6834): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x4000, 0xfffe, 0x8004, 0xa, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x32}, @in=@broadcast, {0x326, 0x0, 0x0, 0x0, 0x1000, 0xfffffffffffffff9}, {0x40}, {0x1, 0x800000, 0xfffffffc}, 0x70bd25, 0x3503, 0xa, 0x4, 0xf7}, [@algo_crypt={0x48, 0x2, {{'kw(arc4)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd25, 0x70bd2a, 0x70bd25, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x48014) getsockopt$inet_buf(r3, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, r1}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) 14m55.497156783s ago: executing program 8 (id=6835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) (async) 14m55.278955066s ago: executing program 8 (id=6837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7d, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20100) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x1) 14m54.133738368s ago: executing program 8 (id=6843): clock_settime(0xa00, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @pix_mp={0x0, 0x5, 0x3132564e, 0x0, 0x0, [{}, {0x2cd}, {}, {0x0, 0x2}, {}, {0x7}]}}) clock_settime(0xa00, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @pix_mp={0x0, 0x5, 0x3132564e, 0x0, 0x0, [{}, {0x2cd}, {}, {0x0, 0x2}, {}, {0x7}]}}) (async) 14m54.042856075s ago: executing program 8 (id=6844): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0x1, 0x40}, 0xc) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="b509f01e09ce354abf0000000000000000000000006c8694d58048f4222bfbc69b560cdc30a4e0a3643e22e4f958ea0f616444b65d0c0d2bceb5f2bbdd42629ba7bb819c1af62434a008c2dfcc8ab57bcd8aaf5af2c12a2d9c12178ef1cf6083b15e26974bb16e52413685d638ff0104aa7f7b10117350cf0839203f5dbf64f21903afc77406c206995f9f077135d0eeb609f44a0e2aebb29198d43bd2167300febbac065392fe6b0a8137df82e288eae3611d", 0xb3}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x3a, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r6, 0x0, 0x25a5, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7, 0x4, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000e40)={r8, "94d5d50e9e9d941934fd811e6a37e58d"}) 14m53.828020587s ago: executing program 8 (id=6846): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0xc10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x40880) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4eb1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa783}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb61}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x96}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd2}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x304201, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) socketpair(0x25, 0x800, 0x3, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000006c0)={@mcast1, 0x0}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x10, 0x8, 0x3, 0x8000, {{0x12, 0x4, 0x3, 0x22, 0x48, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xe4, 0x3, 0xf, [{@private=0xa010102}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x9e4}, {@rand_addr=0x64010102, 0x80000000}, {@loopback, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x5, 0x8000, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, {[@noop, @timestamp_addr={0x44, 0x24, 0x60, 0x1, 0x5, [{@empty, 0x400}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xab38}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0xc, 0xe, 0x7ff, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x0, 0x4, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x3f, 0xfb, {{0x7, 0x4, 0x3, 0x37, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @remote, {[@end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x21, 0x401, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x20, 0x720, 0x3, 0x2}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000e40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) r16 = open(&(0x7f0000000e80)='./file0\x00', 0x88000, 0x16a) sendmsg$L2TP_CMD_NOOP(r16, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x200408d0) r17 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001100)={0x0, 0xc6d4, 0x3, [0x7fff, 0x7, 0xfac3]}, &(0x7f0000001140)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r17, 0x84, 0x22, &(0x7f0000001180)={0x80, 0x8, 0x1, 0x4, r18}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000003200)={@mcast2, 0xc, r9}) setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000003240)=0x1, 0x4) 14m53.583210143s ago: executing program 37 (id=6846): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0xc10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x40880) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4eb1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa783}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb61}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x96}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd2}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x304201, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) socketpair(0x25, 0x800, 0x3, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000006c0)={@mcast1, 0x0}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x10, 0x8, 0x3, 0x8000, {{0x12, 0x4, 0x3, 0x22, 0x48, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xe4, 0x3, 0xf, [{@private=0xa010102}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x9e4}, {@rand_addr=0x64010102, 0x80000000}, {@loopback, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x5, 0x8000, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, {[@noop, @timestamp_addr={0x44, 0x24, 0x60, 0x1, 0x5, [{@empty, 0x400}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xab38}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0xc, 0xe, 0x7ff, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x0, 0x4, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x3f, 0xfb, {{0x7, 0x4, 0x3, 0x37, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @remote, {[@end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x21, 0x401, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x20, 0x720, 0x3, 0x2}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000e40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) r16 = open(&(0x7f0000000e80)='./file0\x00', 0x88000, 0x16a) sendmsg$L2TP_CMD_NOOP(r16, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x200408d0) r17 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001100)={0x0, 0xc6d4, 0x3, [0x7fff, 0x7, 0xfac3]}, &(0x7f0000001140)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r17, 0x84, 0x22, &(0x7f0000001180)={0x80, 0x8, 0x1, 0x4, r18}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000003200)={@mcast2, 0xc, r9}) setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000003240)=0x1, 0x4) 11m3.588161093s ago: executing program 6 (id=8098): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 11m3.541990101s ago: executing program 6 (id=8099): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20181, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 11m3.500949551s ago: executing program 6 (id=8100): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0xbd, 0x31018043, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0) 11m3.358134006s ago: executing program 6 (id=8101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2], 0x34}}, 0x4040) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x47524247}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) 11m3.322819428s ago: executing program 6 (id=8103): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x4, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="47f30a5cdae2e6ac4b169acd71597be21fc25071594df02436fff2a44d43151932f30f04a6575e9c23", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a00)="dcc4addd", 0x4}], 0x1}}], 0x3, 0x8800) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x0, 0x80, 0xf, 0xc5, 0x4, 0xb, 0x3, 0x3, 0x7, 0xff, 0x40, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x76, 0x3, 0x100}]}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) 11m3.045330123s ago: executing program 6 (id=8105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x6, 0x20000008, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @remote, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0xfc8a, 0xfffd, 0x0, 0x19, 0x4, 0x0, @remote, @multicast2}}}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 11m2.822718077s ago: executing program 38 (id=8105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x6, 0x20000008, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @remote, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0xfc8a, 0xfffd, 0x0, 0x19, 0x4, 0x0, @remote, @multicast2}}}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 7m9.565393793s ago: executing program 2 (id=9414): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12002) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)={0x3, 0x9, 0x0, [{0xb97, 0x1, 0x3, 0x24, 0x6, 0x7f, 0xc, '\x00', 0x7}, {0x79, 0x78ea, 0x6, 0xe8, 0x8, 0xb, 0x3, '\x00', 0x7}, {0x800, 0x3a, 0x7f, 0x9, 0x5, 0x85, 0xb, '\x00', 0xffffffffffffffff}, {0x1000, 0x8, 0x81, 0x7, 0x1, 0x81, 0xfe, '\x00', 0xd}, {0x5, 0xdf, 0x1, 0x7, 0x1, 0x1, 0x5, '\x00', 0x6}, {0x4, 0xf, 0x800a, 0xf, 0x0, 0x8, 0x0, '\x00', 0xfffffffffffffffd}, {0x74d, 0x1ff, 0x5, 0x4, 0x2, 0x81, 0x1, '\x00', 0xfffffffffffffffe}, {0x69, 0xce9, 0x0, 0x3, 0x3, 0x2, 0x78, '\x00', 0x4027}, {0xffffffffffffffff, 0x2, 0xc9a, 0x10, 0xf8, 0x0, 0xa, '\x00', 0xfffffffffffffffc}]}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000300)) 7m9.556735038s ago: executing program 2 (id=9415): r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$ax25(r0, &(0x7f0000000040)=""/26, 0x1a, 0x2, &(0x7f0000000080)={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000100)) (async) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000140)) (async, rerun: 32) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x800) (rerun: 32) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) sendto$ax25(r0, &(0x7f0000000200)="bfb162c4ff10ef6b1b1baadfc4f480905c40638ae085fc4d4ba565431114daaf4890b3897622a5a5f9e5b274a46807e3d4297dd8c3fad1590b71be6391529f1fe07c16547f3e880fc8c7f29f2589a40662f323d1aa0563de4d743cc4b1753620146358bb5d3af38e72db769ad33a7286a35fbc7fb25f73436e4d3b0db5f57337b233808d4464804c27bc77a469e95b528b11154e3d15c16ec6449ffb7410965868e9cf50a832be7ec4d19a44d9721fbcc5b688c237ab212c66289c937bc78f24f0f644da2844fe04710199de", 0xcc, 0x20000044, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000440)={r3, 0x0, r0, 0x7}) (async) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x740, 0x2, 0x10}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000580)) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000009c0)={0x0, &(0x7f0000000780)=[@in_dx={0x82, 0x20, {0x17cb, 0x2}}, @wr_drn={0x6e, 0x20, {0x1, 0x9}}, @cpuid={0x14, 0x18, {0x8, 0x2690}}, @uexit={0x0, 0x18, 0xf0}, @cpuid={0x14, 0x18, {0x100, 0x9}}, @wrmsr={0x1e, 0x20, {0x3a7}}, @in_dx={0x82, 0x20, {0x9618, 0x6}}, @out_dx={0xaa, 0x28, {0xa5d3, 0x2, 0x66}}, @uexit={0x0, 0x18, 0xa6bf}, @cpuid={0x14, 0x18, {0x8, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0x3}}, @out_dx={0xaa, 0x28, {0x1ccb, 0x4, 0x6}}, @code={0xa, 0x5d, {"66ba6100b80a000000ef66b83d010f00d83667f3420f09420f5d1c6f36470f01ca410f090f20c2460f01cb66470f58e9c74424000e000000c744240200000000c7442406000000000f011c24"}}, @wr_crn={0x46, 0x20, {0x4, 0x2}}, @rdmsr={0x32, 0x18, {0x26f}}, @rdmsr={0x32, 0x18, {0x9cb}}], 0x20d}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000a40)=@arm64_fw={0x6030000000140003, &(0x7f0000000a00)=0x19a0}) (async, rerun: 32) getsockname$ax25(r2, &(0x7f0000000a80)={{}, [@netrom, @null, @bcast, @default, @netrom, @default, @netrom, @rose]}, &(0x7f0000000b00)=0x48) (rerun: 32) finit_module(r2, &(0x7f0000000b40)='trusted.overlay.opaque\x00', 0x2) sendto(r5, &(0x7f0000000b80)="9adc5f5c44fcb6cc91d4e9d2cbba4d1aec603dcfed4f9ea2cb11184912cca1308aa5782bda8ab99ccdfc798915a361b4dbd48acb45d2616ae20c7c07bae16780ecaa76edadad64a48d0349d654f84f911bceb99c5de49fa5cd621e9d9aad2e4c8c5f4ab877dd74214ca4aa4981a19b4b468ec6ca3f1177fb8065ff758bca90fba2278e0743562f077b93df96d787afbd623b00160b733eaf5c63a6bc25ca82a3f757665e7992824f7e677cf826267544164a8426deff32520a5592775571bca727cc64a14a961c18b312e726176190e33c2a291b1f91eb7f0c0df2df0bc4e53ff969b91034eb411a33057ca86d5191b40c7dd65ca878b7e8d0c24835e31c3cc8286ccfaa77ea2e0a70ca97d8ada9a79e867a761153d4a4937fb9d62a7755c66765dcba0a9ff3b74b7c2b814d5e7709abbfefab972b6edccb5b670971412b9ef272d336ee66f7219ac21242af0bd72ab7ce33a0358fb8d07349bfd38f13d88d47e51c6a60094131ecec7c3011ccab7b0f0f2f779ec7f27e0a723827d2e2a7577fdfcdfa71e8acef1276ed41ffb23f454873e248852350144b1f64869fb83f42feca3bec662ced9d6f44b348e84c4dc5ebabbc796448b382647c44a74e282af7038bdbf80b809f1a781449cf5498615689ad5f4d9227553d6b0fff39da0d006dc99445a5c916c0b4c94ecafbfea6c69c89acc258cde84267fe2351c74f406d9ffdef6bb4d78e2b3ef77d0bae74f044beebc244bcafe4b36dc4df76ec6dc03d1dbab1887ee26d50c829bda81e9e1c9215f3951324cf34aaedad6931028b55ac4ecc58ad1030698c76704b673d231fefb5d136624c2597652abcfbd8b91b4af950c5942e8fe4324584614732919e4961f279a723ec57afa8e4fdfe05c643de6ddb06b5885b5129818f4c06ecc13c75435c3253699940434916d21ef2f4fce11ac032f3e9d0f63388f4a14f683bda9807d05ecc84d74a4bcc936ad26250e2957a9a514af675f041bdd4ce09268e28f0c3753d9252a6381cf89a9add14bf5b1f295df8b03c6691e8565cb8ffee961162bcbdcf04945cb13c5470112df58720c9296a93e01320d2606a91e665a04aee75b5b1b648739293d7c07d494c0f8204e6acece5b827e6064600cb20d7c69d03cf51215ae4dba39e7359d0d436b0872a6302d10f5d4f2459ba75c520b3e6da70dde7615b492e0ab9a920744633939d213f5cb8dd3e060dc310c5709b8792b067c5f297d73f0a40e3b9d6d9041b1e5d09f410c85856612d8c4b66f360297f5324bae7189bf5602087c0054ceab40f5e03681436ce068a58ff3865e4d9e460a2ffd40bd18f65931e5fae03fb3d6122f74eb3254eb67b36e4e08b7db980e703741c8d108aa981c2943ce3bfc7470730f971d04743540a8cc38ee40b0a11881f13729b6471d0dbf9c18ae1fda27b1d858e4e50a5ba880af1fb889ed9c4b4c475ded36d8e1416505a776985e2cf0e2b0cef72186cb93d92407e1332f23892931c631a663c369a4506b90d5c846cdb2010a1aa043c1ab69f89a4b95f28221f9f32ae2ef0ff8c7ed2b51c0c9b2173e8727b361add7de550c7fe0698e4e717f252e1078e66fd477b21fbb6f1777d8a4f11740071a5e2ac495fbeecad3381ff97ad39bc7a9b09035e6c7b30613638145d922b0ba9d109b371480691891336769852f1327df31de56d3052b0ef646222dfb19e7cedf825d065bdf47850a533654270f3c141b0a69ff5d9678e94886f7ab785ad46528a69173f31dd13bdbd730ccd33c86d6fb42c7a97bda3cd07d8fade29047c1bf48c5b9664b9abeff512d69ef1e4586026552103860ce23b4754314497171458734e07e05f0cc64ab9265ab1d834b935df368daa4b8f38789b0bcd8c16a652788243c335e6d6ab97a264b83c6cc9b7220467c10c1f4bfc3be10ecf395015275278575b936c91f3877d772d07d988bd69acd08f332dc45991de5862316401d4e6ed3b52e2ffa20702fdf2439e6116af77cfc2c73d9124035d60060456364734641f7c6c1960ad90d4ead7fb59c7436c9ce9903264fca052bf3ba9887daa2cf01272d9abfb24743e16c0b5d4fdaa72620541df90fc1070fdd831267f378061cdfcb55178fef55607f3d9fb7cd0a337d8d20139a3040ca05264d3c30a5ec0dd92ccd683ebfa802215a2056dbcd4c289a67cef005eeafbf8d80b9df90e130014dba7144ba4d77ebdf1c3c7c40db22b9a8b31e584d8b16221a0032e78eda2b8092e2a05267ae1b4d853c75ca716de1535b9c513e7b59410e09836799f06345af1580573a9224a17104784d9bbd284fec5f3fac0066c71e3c6095c0d5f463b32e6773081198accc56e426cc4d091f4c48065ef4c2a71ec27055c155e815f1ebe72b7597b0cdd7ddd1bc9bdbc892923f669f663551f09eaeb16ca9c700b4ae4cb427a877a6675832bfba7eba423c07acf8b347e796f21261d1f2a2f8e3d3f240f1e72d3aa248cd95ccf5cab0bb22616e5ba1e4797bf54d66a7187682a120fd962cf4281a40aed144d1332db780a3aa2b0b11010bff469592bd3d20507678f9c866005937514d1c4a8f07029b0d15e5184f3d51c57baeb99b1e64c864c363fc537d9e1ddbc4f9b18e33f355ec1a185bbd581769ddf32a1129f58a65a9f57853fe29151ae516f7d1a4ebccf8d494f3ef818b2527f5b94ada857fa4c8ed90bff699b121d6649c8e6cc7daa11c28368111f70eb1b56660ec3d65cfee6de78925da89a16f8e833105f57c3d39cff7a16becbe87694bbc13d19fdc9d956aacb8cc379381dbb6fbab0b2757cde9e47149e13246c88ab26580999a247858d85440654247ba37222b9cb5220c925212722d2dba03abe96429572611dfe602cbdb10f095d5e191f3ec404d8b583fb457140256bd71dcf6c2b12d76eeab4a0d36d850087e4cea0c482e96aef8dcd69ea92badc653a0ee86647720511e234a6c8a14f2f08dfb251f08b6dcfb8e0f0b8d92682c807e3fc10abe2175f54a8b835a40922cbff4599684d4c20cb2c2134b5fbabc75c2b48c9880e40afaf59791226c76d8657633f0df35966cbff6c2c6648bd1353e7bd2a04264403eb227a49ee1ead403b710aca289e16217de1f077afafc543858f7172de54dc0ccfe8a470385b0a169f814a18bd417b0765e387300d105d2f669e10c13f2b187c752721963c853baba75ad9450ae4b92d3fe2d65f118af25155d6fb18a5e093be4c2ab87a26263a80a981f19a13f118124f73f03e38c71de846db33ffc6557c745dcdefc4cc4e97b67d8a0a371a9757e692875a9ae55b8b7790467a5670031e3df20b910cadf79978cff900755881bb116cffdf6db19151d4547646ed99d199884ac2a623527721033892a16ab33e924fec0474a2bbea111c135c6eb0f7aa780d40892458f506ba021357f8b2a8cf1c83558073026a834f783ee5a9e732e210b021b6991e12b2cf094992acf503e5030153863a5d88237d6ee2c02de04c9f3bf5531ef390d0550a659a0ace53042f032d7b4d03f22c07e95365de7962ca0fc0d79c128cdf2b599f373b6508abd45c9261455cf39e404e48bf13b87a4a31263b203c02b9325df7686ae4b37e952f9ec8c6ceac827c4ec325b496674cda10a8adda506870b9188e72e87409546b1c82c437240f436ba36a95ab5491af77c0c6beafef2c2aa21f72e1d07ee56bf6fae225d809442c5a31cf1fbb4bab9a3a33efc35183ce1ddecddd4e02e45ed3a407b80f5d8c23782a1e98e96129a469bf391f6aa5275bee28428e57961c9b413d51bc2d62773016f1c2df9874de7892079a0f168e896662a8a833259fa747c45c39236e7e80d9978ad6ecd951d25176a806afc71b60a72ef2932c2d9f3ae206c64899ec5cc080402746cb00d1c1c65297dc136fb2ddd5c71619f47570abc81d865624768bd7093ef227e86df21ef8900cd118607d83bfa5e1bdee8f83301d82a2e84847b9012c7a68e2233bedfa55255cea0baa98af731dbad758d9c535e17f091b8caf12bdd8997eca75bed88785ca939735ff395e46a580f1de153c062dd7b95b79f3fd92c68b3b2c11c437a679fe10d78ea07202c2be52806c4fc83d3d45ad2b4c0112c4730c55a5ebc694dd175e9af9842d6c2a7ce84478b64e67ec34dc83569105fd2d81f6d484ce06e8dc97f2b14070f91f6d093cc4e95b58686edfedea885620828e69d41439f9077a16ee355e2dd2abb84126fde901f7f011e374bb29e799ffb41fd44aeadca54841fca992fd71c0a72de5e4d8362d00ce1329ba78fb66f897c43351d73199696cb35554b0506967d59741702751a5f7f2b785caee94f2d51ab403bd1d2e053a5d71435dfdce42243d9bd8f4bd4bbdec88d5f8c8a82a8bed3925e5b2664ac2c1ac3ea3af444a19db634c2549b7c4d869adf93e8f309ff02996449652e5e6ce399d29f4807808df97992f004bf8e933957ca8ea250f2eaea0546f1e843e0c16a621e62f89175656d927517b352d24e418d43b9e32837b1cbdbc517b6ee88bae0d62a2f89bab9c4a1440f52958241646659e84ce478ded936648036499636e930817a414081921da4ca7a450ab47a1f287fcebd8ea923c173c2f38dcb9501c81ea591ab64d33f548513e26100efd8c78343b65dc3de6e3b99e231e5dfcd69a15c675ad8cbbc1130a7d87202b96f97f64bf0914fa1ab1e973d7e65571d8fbfe3d7e48c408fb73f444baf07a5c32afb15a32da9853492446682e81fe1b181c0317bebe499c4b60853dfb9f17fbacc8803e37315707c0369b6e90663b56633cdead455bccf2cf9c02b851a61a043c33a2d45ebccd467723605126509b5c7bb4db0c6e8376fd1081f93a593803e33b3f1665ef6c57c7af9232e206ece42914b3f79aa3f15bc069c51ab01cf71a9721eed969c44a69d0cf5407163d12d2bbb59451270b9c45fdcc58647b34d84ac623ece4dae2d154e15ab6456edb5e6c185d01ed8db91cda0337848bc144a85ab5c4fec9d2cf51454e92d089864d4e6ba806e3815b7f1d18fdcfee2753b3be91289ac0bff66e2fe48c79a649692b001589ffaa33796b391f022f79debb1f90277c6fc1fcf62d902c38c4245a8e436e104fa61c8c56a373d641e64795070f5b66e3f44e4a04e5d2e7031446c67dd4c0d369d2de61e9abea87acb7119f034427a7ac7db5e2d69ffce096e1648ed8d205aad7216a38dc32cf002b444666858fc1289019c671c794447b3fa63a0de7737f1eb5498501d8112e0f060cf9ac0e4552112ee0d98b60489c2febf108b64346608d6c7c07bd1307ed3fea48d8339eb06d131eb49fc7e6a4b3866a0dfa0704d0a4f6cf042f028bfbc801def8b00d1e952ddaa14582e50561f4bb0c86b2a1497d9624c99d4fadd635724ae0f92f1b9ec74378c3cc1c2ae6fa03eb608abc828d9cb6222a8b0853c80e1343eda59b809510cf51c1d1a19cbb76571209956c911aeb586ce1cd8b42e74f4747796cb96caccc6a7f1f4c3295c19209501328c900342a2eb963ba8f641079925ea3c528514405f5eb6963524220f2c0e5a25da18477e9999980a77cf2611e6404dc0ad6a848c94c61dd87d2c56bb6ca234a508baf94068ddd41ac1cdd3085dee0c69f2b7808878b7acb7ec9c4380a6836d03ca7683c7481a8756bbf86d0bc148fff88f3c007ea6064c9a01fdc1bcfd534b60da9295aef4bc98fd28fab366a1bb197ec0634603dd387320e1b95f2f75290b0712b92130a7956ef553c1d88f6bcb524d2a062bd40982d45b776b971219e431935004658b19afe2e571e4435", 0x1000, 0x40010, &(0x7f0000001b80)=@generic={0x26, "f47de8afc2be2e56d7505a498e212ed5c3460d31e0965e12399495d94af640bafb38128602ce8e15deaa061f024f1db3f3bb5653247985d3405e1fd84a0e917d441b7fea1396ccae5a12c2151c3b5da40711160841a37220f24b9dc8006464ecb7d99c07f9142869df8d0b0991e592bff06d71d190f621c3026de2f50d66"}, 0x80) (async) r7 = gettid() syz_clone3(&(0x7f0000002d40)={0x110000, &(0x7f0000001c00)=0xffffffffffffffff, &(0x7f0000001c40), &(0x7f0000001c80)=0x0, {0x32}, &(0x7f0000001cc0)=""/4096, 0x1000, &(0x7f0000002cc0)=""/56, &(0x7f0000002d00)=[r4, r4, r7, r4, r4, r4, r4, r4], 0x8, {r2}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000002dc0)={{0x1, 0x1, 0x18, r8, {0x9}}, './file0/file0\x00'}) ioctl$F2FS_IOC_COMPRESS_FILE(r10, 0xf518, 0x0) (async) r11 = syz_open_dev$sndctrl(&(0x7f0000002e00), 0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000002e40)={{0x4, 0x5, 0xb, 0x6, 'syz1\x00', 0xfffffffc}, 0x1, [0x1ff, 0x3, 0x1, 0x5, 0x9, 0x9338, 0x8, 0x8, 0x0, 0x80000000, 0x4000000, 0x5, 0xfff, 0x5, 0x7, 0x2360, 0x2, 0x9, 0xfffffffffffffff9, 0x4f79358a, 0x7, 0x3, 0xcf600, 0x6, 0x950, 0xb, 0x7, 0xf897, 0x6, 0x8, 0x8b, 0x4, 0x5, 0x1, 0x6, 0x6, 0x1cb, 0x4d, 0x0, 0x8, 0x7fffffff, 0x73c, 0x84fa, 0x9, 0x4, 0x3, 0x1, 0xfffffffffffff0fb, 0x5d41a878, 0x7, 0x180000000000, 0xfffffffffffffffa, 0x3, 0x800, 0x4, 0x7, 0xf84b, 0x4, 0xffffffffffffffff, 0x2, 0x8, 0x7, 0xe2f0, 0x80000001, 0x1, 0x7, 0x181f2607, 0xfffffffffffffff9, 0x1, 0xb, 0x8001, 0x7fffffffffffffff, 0x9, 0x4, 0x6, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x1, 0xa, 0xd801, 0x3, 0x9, 0x1, 0xb, 0x90000000000000, 0x5, 0x2, 0x3, 0x2, 0x483, 0x1000, 0x3, 0x9, 0x8, 0x6, 0x9, 0x6, 0x800, 0x5, 0x5, 0x3, 0x5, 0x3, 0x7, 0x7fffffff, 0x1, 0xfffffffffffffffd, 0x5d3, 0x2, 0x10001, 0x6, 0x6, 0x2, 0x0, 0x8, 0x3, 0x7, 0x4, 0x3, 0x9, 0x2, 0x9, 0x3, 0x200, 0x800000000, 0xe1f]}) (async, rerun: 32) fcntl$lock(r2, 0x5, &(0x7f0000003340)={0x0, 0x2, 0x2, 0x2, r9}) (async, rerun: 32) r12 = fcntl$dupfd(r5, 0x406, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r12, 0xc08c5334, &(0x7f0000003380)={0x4, 0x2, 0x1, 'queue0\x00', 0x2}) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000003440)={0x0, 0x6, 0x40}, &(0x7f0000003480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000034c0)={0x9, 0x202, 0x7ff, 0x480, r13}, 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x4c, 0x0, 0x703, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x4}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x968}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) 7m9.449390406s ago: executing program 2 (id=9417): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0xbd, 0x31018043, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 7m8.481249551s ago: executing program 2 (id=9424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c5c18, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 7m8.463554143s ago: executing program 2 (id=9426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="00400000000000000a004e20ffffffdbff", @ANYBLOB="915be95680c817fe75f03b85824be41e8cd3d5584a64e57c1296ede62a59394e37ff57d5ae0b69a7ad63c8c9a76ab021972f6c52941f25601e7a93c1907fb58326856ff661d816a57cc635714d56a464c82df17b8e75a09bcf05fbf438dcda8281aa20c7f94ec516e9b98cc11843cacbb4b01ac2639b2a7d"], 0x210) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 7m8.158194925s ago: executing program 2 (id=9427): socket$kcm(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$kcm(0x29, 0x7, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 7m7.921410734s ago: executing program 39 (id=9427): socket$kcm(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$kcm(0x29, 0x7, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 5m38.237010323s ago: executing program 3 (id=9888): r0 = socket$kcm(0x10, 0x5, 0x0) (async) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async, rerun: 32) syz_usb_connect(0x4, 0x445, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="100012800c0002"], 0x34}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="6704", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000"], 0x50}}, 0x400c0) (async) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x1e99e4c20450b969) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getrlimit(0x4, &(0x7f0000000000)) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IMGETVERSION(r9, 0x80044942, &(0x7f0000000740)) (async) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r10, 0x8028640c, 0x0) (async) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb1800000000000000290000000400000002ab"], 0x58}, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cac681ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) (rerun: 32) splice(r0, &(0x7f0000000040)=0xd, r0, &(0x7f0000000100)=0x2d7, 0x1, 0x5) 5m38.201691279s ago: executing program 3 (id=9890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat(r1, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35) 5m38.097014741s ago: executing program 3 (id=9892): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x80000007, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3c, 0x4461, 0x2, 0x5, 0x7, 0x1, 0x7ff, 0x8, 0x4007f, 0xffffffff, 0x6, 0x6], [0x10000, 0x3, 0x2, 0x400, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x100, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x6, 0x54f5bad8, 0x8, 0xffff7ffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x5, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x7ff, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0x6, 0x5, 0x491, 0x8d3, 0x7fffffff, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x3, 0x4, 0x5, 0x9, 0x0, 0xb9f, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x7, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x7d, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x2, 0x200c, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x11000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x0, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000100)=0x8, 0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000001140)={0x0, 0x0, @pic={0x5, 0xc0, 0xb, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7c}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x814, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$qrtr(r7, &(0x7f0000000680)={&(0x7f0000000300)={0x2a, 0x1, 0x4000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000340)="1c94de0c76915daefdca1bc354d4338328f67ace6507dfe67277604cda50ea685fe530c813e325fec1d45402731948160811658faba151d028bf03459baf5b94e2ac54553a38075f2a4d203410181191d4ed3f17952b3803e0ee526d3fa9058fb05d515e3d253fc0c8ca3d295cfc999e2ccb8a07027c5786b46cdc16a79f00a93d978624584bae160b0908c8a876a2ffabf71a815438a02502c8139817fb5890f42555666be7a61cf5e6de53988589bc13e954daabbcbf3456a3652bc2807a42ce33f7d55c3f19bf2caf11c670defa", 0xcf}, {&(0x7f0000000440)="be4587da3bb5629b9d68d4c8d6b492fb631ba2b561085f47dc70f687cf77639cbdc89369c5eca5c5409b61b3be1ff55a6c1fe956f8ebc58975e5ee56f5060e021b8b62d33974d6177ed73cf7d9bf70fe018aad0ebd1316dbef032e9913a79ffa7bf9241fe607dbb8c15e4fd0454df83d7fd1b59ab7d430dff1dc8c0aef7e2f1b28bec904fe2bb4e39c79219ad2a8b81a963a1a47d38ae8f157de0c3dd06f00e2df269067be1f29423d2698a9d56db98eb582afe6a4b528d3ddfcaa24ce12305778299c701eb4475f4d923fad2ac28d038eae37b1cb2eca6a6739784d8bcc543c98b602919ebc9fb52e9d08", 0xeb}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000004010000a2000000d4bd0092fcc7c923b800000000000000040100000700000021d4c9989e443b1d05307fe3d207c016d20855ed8f0921fc6a8771cdd7f7b1a7fb8042060ff232164df29f3d4579fc16bb4221d6ad38bc45b2e36c7a78f9bf26f93af79cc8b9eddb6cd24461b00bfb8f4199e801458d96c2af34179fad9e789cd97e8678cd2f50529d5e4131d2de5be1cce48648eb7d5cd2ab89bd5b66606cdcda0c120d279f5027b3fcf5cfa6f04d541dfa9f32e9fc41fa2e4501483e322ef73054310000000000"], 0xd0, 0x20000000}, 0x38) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r9, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) tgkill(0x0, 0x0, 0xd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$KVM_SET_DEBUGREGS(r10, 0x4080aea2, &(0x7f0000000280)={[0xffff1000, 0x2000, 0xeeee0000, 0x8610d938461955fc], 0x9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5m37.862498996s ago: executing program 3 (id=9894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 5m37.809285733s ago: executing program 3 (id=9896): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x4461, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x8, 0x4007f, 0xffffffff, 0x6, 0x6], [0x10000, 0x3, 0x2, 0x400, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x100, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xffff7ffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x5, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0x6, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x7d, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x0, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000001140)={0x0, 0x0, @pic={0x5, 0xc0, 0xb, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7c}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9e}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x814, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, &(0x7f0000000280)={0x26, 0x0, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5m37.657871147s ago: executing program 3 (id=9898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@rr={0x7, 0x0, 0xcd}, @timestamp_addr={0x44, 0x0, 0x82, 0x1, 0x3, [{@multicast1, 0x4}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@empty, 0x646}, {@multicast2, 0x5}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x8}, {@local, 0x80000000}, {@rand_addr=0x64010100, 0xffffffff}]}]}}}], 0x7}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 5m37.449188595s ago: executing program 40 (id=9898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@rr={0x7, 0x0, 0xcd}, @timestamp_addr={0x44, 0x0, 0x82, 0x1, 0x3, [{@multicast1, 0x4}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@empty, 0x646}, {@multicast2, 0x5}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x8}, {@local, 0x80000000}, {@rand_addr=0x64010100, 0xffffffff}]}]}}}], 0x7}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 1m34.964898369s ago: executing program 1 (id=11295): r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x31, r0, 0x8871b000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) read(r2, &(0x7f0000000040)=""/98, 0x3a) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000006c000680080001000f00000008000600090000000800060005000000040005000800060009000000420004"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0xe4, 0x14, 0xe4}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x12, r11}, 0x14) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0xd, r11}, 0x14) bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 1m34.73093105s ago: executing program 1 (id=11296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f000000a340)={0x0, 0x0, &(0x7f000000a300)={&(0x7f000000a2c0)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000800) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 1m34.660974626s ago: executing program 1 (id=11298): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002"], 0x98}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x2486, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002"], 0x98}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x2486, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) (async) 1m34.590433582s ago: executing program 1 (id=11300): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r5, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000006c0)=0x4) ioctl(r4, 0x8936, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000000)=0x100, 0x2) rmdir(&(0x7f0000000440)='./file0\x00') r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m33.63447248s ago: executing program 1 (id=11303): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)="f87ac70349"}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, r0, 0x4198000) 1m33.268965166s ago: executing program 1 (id=11304): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8009) readv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/130, 0x82}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000a30000000000100000002c00000000000000"], 0x20}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x14044080) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000010af1f100d055b90a6310000000109040000000000000009043a00001fa9c000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x5, 0x3, "be9d49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x0, 0xf, 0x6, "543d9ee4f9f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x28, 0xe0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x5, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x41, 0x2, 0x1}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x7, 0x80, 0xb, 0x20, 0xb}, 0x94, &(0x7f0000000300)={0x5, 0xf, 0x94, 0x1, [@generic={0x8f, 0x10, 0xa, "83f9a105f50c58c33eb5f2254ecc3390c3b1dd2a14365fcabb6297e6fbed05912f3c0b8ef225805523aef3182843e352b1a10ee455acdda5c7d182a7b890a81bd1f8d3e9f8ff63bad048481ec326df446a8787468e3bf9750e48a3aab6f4a3e31ea21e7b583858f6f86b1ecaa3511e1c26f89bab7ddeb8f6796e314b9eb4c42b55c13b79fad875c630a8d2ab"}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0xe1, &(0x7f00000003c0)=@string={0xe1, 0x3, "d991e892e68152b4c53138114ff89907507fdbc8eb3ca4489c6de3409c8c692b5f07ff54678c2630c03d172e2184b18dbd82214fae4da1cf567701c05dee97a0f83f0d7dcaa83f98f93977f014564ffdc02864b14a922f13b5ba27d5bd1dd1e2d276011c7cdf0147d8fe3d3cab042680dff328cf30fc884dea32b6ec828c1adf3179bd49dbc5c686b7820a2921b455bcead472c9623148798cee17a7dcd11d42f165b0753fcbde8e237066957a7fbddcceed26b9c146ab412fe112be29393c7cdbd151368e638931478134d9fa7e5fedb1dc744dfc2bae71b00910f1d9a4d0"}}, {0x97, &(0x7f00000004c0)=@string={0x97, 0x3, "8b02f8b9c039cb3893baeb33c46e58ae8d50d77221f9effc91c2435d2d383876895d11f29ff3523f8f78682f72364b3073329902bb01792fcbdc95affb6ed2388a796cd5cf860415eaf4f9e7089f0aeb11baf68864b47b8cdcee4722b13e18ff6da10c45cc76eefe0b8cc28659889a213bf566d720d5bd6b2c39a9f3dd55f3af34c4cfea4e6b6f67f3bb392271fceb3bc61647053c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc06}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "da49d4db0cee4fc415c3c784bc28"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1407}}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x10}]}) syz_usb_control_io$printer(r6, &(0x7f0000000700)={0x14, &(0x7f0000000800)={0x20, 0x17, 0x80, {0x80, 0x23, "0fde08dfde183dbae7b1363c39d6fddf2b62cba805e1fa3f40b4467de1ff945c1646e99fe1057c39373c63d68966158797e8b93aa6e13da4069d15e6a8de5a8b6eda7cff00c95e48aa5c1af952b7620b8b7cf15e17baf3e598382d2f4bb59dc10cd9292aee1491d5b77e1339d225c348b37a9fc0f054b17207814d65bd0b"}}, &(0x7f0000000940)={0x0, 0x3, 0x51, @string={0x51, 0x3, "53cf17677c32015f8df0520d9719cddd8c9c63d19bf34ce160096dadeb2b60ea712c07bc481a9d510ecfbb24d2b1435c31bc9b71691886bc4fb0047f24658279fc40a3533c78c57abbdffd28c419b7"}}}, &(0x7f0000000cc0)={0x34, &(0x7f0000000ac0)={0x40, 0x9, 0xb3, "ac7a4213e98ab8f803aebc01fcac3d1102d05e37c5b1556b98bfe3f8c6a99e539babeb9eed98b59e74ed5ec54b061f11b902efd231af0f15c508d2e3ed28bc6317be5ddb88f2e1a7c1c6f83650a702b3e918011a5b694437c4b3c42b7a7d663733ca894d69b0e5ac1b32290e7c7b225d17683cc8a2b8c10f0989d93d2cb87cf09e88674d4295a51e7d16dfba62084534fdaebdb59d78ea403f466887242bacca94daab3d2e4bf34c6a32404c86f877f796279a"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x95, {0x93, "055416fa74c33ae79f21ef81d5dd5d62ab1be45fa1bf041c1681d9ab50d4ce1f1694bb350746389e8ad139a4fd672c048d640dfa9adba02d400698ce444b7558d043529e2c191a5678f431b233030503dc3424801ecf23847a6c28e6e604e02552e6fa752555e72b535fba64d8750da7d6dab4aefda3b0910ea0ef18ab0a7bc69d43b75b1f48432c37f77b3d97adeb996ac9d7"}}, &(0x7f0000000c40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000c80)={0x20, 0x0, 0x1, 0x1}}) 1m33.130012269s ago: executing program 41 (id=11304): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8009) readv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/130, 0x82}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000a30000000000100000002c00000000000000"], 0x20}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x14044080) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000010af1f100d055b90a6310000000109040000000000000009043a00001fa9c000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x5, 0x3, "be9d49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x0, 0xf, 0x6, "543d9ee4f9f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x28, 0xe0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x5, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x41, 0x2, 0x1}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x7, 0x80, 0xb, 0x20, 0xb}, 0x94, &(0x7f0000000300)={0x5, 0xf, 0x94, 0x1, [@generic={0x8f, 0x10, 0xa, "83f9a105f50c58c33eb5f2254ecc3390c3b1dd2a14365fcabb6297e6fbed05912f3c0b8ef225805523aef3182843e352b1a10ee455acdda5c7d182a7b890a81bd1f8d3e9f8ff63bad048481ec326df446a8787468e3bf9750e48a3aab6f4a3e31ea21e7b583858f6f86b1ecaa3511e1c26f89bab7ddeb8f6796e314b9eb4c42b55c13b79fad875c630a8d2ab"}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0xe1, &(0x7f00000003c0)=@string={0xe1, 0x3, "d991e892e68152b4c53138114ff89907507fdbc8eb3ca4489c6de3409c8c692b5f07ff54678c2630c03d172e2184b18dbd82214fae4da1cf567701c05dee97a0f83f0d7dcaa83f98f93977f014564ffdc02864b14a922f13b5ba27d5bd1dd1e2d276011c7cdf0147d8fe3d3cab042680dff328cf30fc884dea32b6ec828c1adf3179bd49dbc5c686b7820a2921b455bcead472c9623148798cee17a7dcd11d42f165b0753fcbde8e237066957a7fbddcceed26b9c146ab412fe112be29393c7cdbd151368e638931478134d9fa7e5fedb1dc744dfc2bae71b00910f1d9a4d0"}}, {0x97, &(0x7f00000004c0)=@string={0x97, 0x3, "8b02f8b9c039cb3893baeb33c46e58ae8d50d77221f9effc91c2435d2d383876895d11f29ff3523f8f78682f72364b3073329902bb01792fcbdc95affb6ed2388a796cd5cf860415eaf4f9e7089f0aeb11baf68864b47b8cdcee4722b13e18ff6da10c45cc76eefe0b8cc28659889a213bf566d720d5bd6b2c39a9f3dd55f3af34c4cfea4e6b6f67f3bb392271fceb3bc61647053c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc06}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "da49d4db0cee4fc415c3c784bc28"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1407}}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x10}]}) syz_usb_control_io$printer(r6, &(0x7f0000000700)={0x14, &(0x7f0000000800)={0x20, 0x17, 0x80, {0x80, 0x23, "0fde08dfde183dbae7b1363c39d6fddf2b62cba805e1fa3f40b4467de1ff945c1646e99fe1057c39373c63d68966158797e8b93aa6e13da4069d15e6a8de5a8b6eda7cff00c95e48aa5c1af952b7620b8b7cf15e17baf3e598382d2f4bb59dc10cd9292aee1491d5b77e1339d225c348b37a9fc0f054b17207814d65bd0b"}}, &(0x7f0000000940)={0x0, 0x3, 0x51, @string={0x51, 0x3, "53cf17677c32015f8df0520d9719cddd8c9c63d19bf34ce160096dadeb2b60ea712c07bc481a9d510ecfbb24d2b1435c31bc9b71691886bc4fb0047f24658279fc40a3533c78c57abbdffd28c419b7"}}}, &(0x7f0000000cc0)={0x34, &(0x7f0000000ac0)={0x40, 0x9, 0xb3, "ac7a4213e98ab8f803aebc01fcac3d1102d05e37c5b1556b98bfe3f8c6a99e539babeb9eed98b59e74ed5ec54b061f11b902efd231af0f15c508d2e3ed28bc6317be5ddb88f2e1a7c1c6f83650a702b3e918011a5b694437c4b3c42b7a7d663733ca894d69b0e5ac1b32290e7c7b225d17683cc8a2b8c10f0989d93d2cb87cf09e88674d4295a51e7d16dfba62084534fdaebdb59d78ea403f466887242bacca94daab3d2e4bf34c6a32404c86f877f796279a"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x95, {0x93, "055416fa74c33ae79f21ef81d5dd5d62ab1be45fa1bf041c1681d9ab50d4ce1f1694bb350746389e8ad139a4fd672c048d640dfa9adba02d400698ce444b7558d043529e2c191a5678f431b233030503dc3424801ecf23847a6c28e6e604e02552e6fa752555e72b535fba64d8750da7d6dab4aefda3b0910ea0ef18ab0a7bc69d43b75b1f48432c37f77b3d97adeb996ac9d7"}}, &(0x7f0000000c40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000c80)={0x20, 0x0, 0x1, 0x1}}) 9.849441327s ago: executing program 0 (id=11804): r0 = syz_clone(0x1102100, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r2, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) writev(r3, &(0x7f00000019c0)=[{&(0x7f00000004c0)="b52c", 0x2}], 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xa4, 0x0, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xec}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x8, "cf"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x3, 0x2, 0x3], 0xfd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0xc1, 0x4, {0x7, 0x25, 0x1, 0xcf48081ed2274dc5, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x8, 0x1, "8a72b6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb1, 0xd4, 0x5, {0x7, 0x25, 0x1, 0x0, 0xfb, 0x3}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0xa, 0xa1, {0xa1, 0x5, "6b6da2a32ec15f99aaa1064b6f9f5ba373e96a496b288619e2f59208afa1c2bb01f857b503960cfcb15ce5678c8c9ed2815b5a75cbad6200653db53c7db9cf3fd213b9c2a1e7bedf5af0fca50547c1cdfcca2b5a6c0042d93e1c2dc180267df1106b405298b214dfbb2eda813108ea4a0e55c4659f67bc02dabe75c05c88e40ff022c5da08e6004e172efd6650f81df58716aedb431fb7808d4583b2a05cab"}}, &(0x7f0000000000)={0x0, 0x3, 0x21, @string={0x21, 0x3, "2457f9644c9f469582c35805cc062e1e3f2a9c6855f717630826bae209e158"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x8, 0xc6, "85e99627bcdf3b59b35567fb5ce21b048847bd24c234d98c9e29bffb54ead40f4c3751225d7f5b1351dff6797bffb01fe499ef4a5c688b69faad5dfa20aaa4a31f61c1dd90689a8eeecb4e29a038a812723e472a23be0ef83e7d9d93545a16773a2d68b3e81b6974f656d545e9c8ff41284be22d09e1ae7cc99612ce41e7e8d957121b6b2cbe3ab792cbf60c142becec22a0317b31af4976c0be37fd8618489cce51014cd185fce36380c1fe723457f46405567c23f368a009ea1bb4f360bb1c3944c845bc98"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x81, 0x1, '('}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "61cac2"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "c7ca"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "564457f1"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c529a8"}}) 6.553489843s ago: executing program 0 (id=11829): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}], 0x1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe) (async) shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x7000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) 6.433515476s ago: executing program 0 (id=11830): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041) (async, rerun: 64) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) lseek(r2, 0x3, 0x1) (async) getdents64(r1, 0x0, 0x0) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000300)="9c6b30168b22a0516b5176da47d06e79e908b4ed5f9bfb797a31062f9498b0e61d0a44528dec107282037ce7ff6d8acdeee978f8f0c83b466680f7ef63d2cdde4baba8fb9de4aa16cab45bb4f3f282b1f2b10fa59cda0be4640aa4d82f54847339eca43aeb97b8b6605bb3901ab6350ad2347299dc2ee97f9d944ddb5657100f3cd0e1d40dd7bf2d762caf5961d58cedd274f18a8a8bc79a599815abfc98425fffdc8250e320a2340c9577aaabcbbfac4626b1c0092ea13290") ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000180)) 6.401159731s ago: executing program 0 (id=11832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x7, @raw_data="8a93a9bca2e7a34fd42cad7a27db2244182edb88bfb1f531061fff7f8e2167ccf1cb11a2bc849e7071c7dc5809a0e1e7a322fb50414f35f9a64a7a24e6eac6339fe77f834b71d14670185f2b582edd96ac12667b94ce5d1dab41c7702b0dd2df2800fe8ca0eb607aace9f42c6f82b97820cb0686ff8279996467f64732144e6d8a36e8848dcbc0be0fe8c515128a63995eba99cf70e5db63cb5a10703d334e05c4fcbf9910e795abe501acb4bc4ae4b30c5e2679214f982efdb31aed3ae4392d31b7177aee45dd8c"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000880)={0x10000, 0x4, 0xfffffffe, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}]}) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0xc) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz1\x00', {0x3dac, 0xa5, 0x40, 0x1ff}, 0xf, [0x8, 0x8, 0x5, 0x5, 0x80, 0x3, 0x5, 0x800, 0x8, 0x6, 0x4, 0x8, 0x8, 0x3, 0x7, 0x2f29, 0xff, 0x401, 0x7, 0x6, 0xe06, 0x4, 0xff, 0x7, 0x2, 0x8, 0x0, 0x4, 0x401, 0xd, 0x2, 0x3, 0x982b, 0x2, 0x1, 0x3, 0x7fff, 0x2, 0x2, 0x7, 0x6, 0x200, 0x3, 0x0, 0x8, 0x7, 0x5, 0x3, 0x9, 0x7, 0x3, 0xd10, 0x7, 0x8000, 0x9, 0x6, 0x130b, 0x5, 0xfffffff7, 0xbf90, 0x3, 0x54, 0x0, 0x1], [0x8, 0x2, 0x80, 0x5, 0x1, 0x4, 0x1, 0x480000, 0x2, 0x0, 0x8, 0x3, 0x7b, 0x1, 0x7ff, 0xa1e000, 0x0, 0x8000, 0x40, 0x3, 0x800, 0x654d, 0x2, 0x40, 0x1, 0x9, 0xfffffff9, 0xffffffc0, 0xaa, 0x3, 0x8, 0x1ff, 0x11c, 0x5, 0x3, 0x3, 0xffff8001, 0x7, 0x8, 0x6, 0xeadb, 0x2e, 0x6, 0x4f69, 0x4, 0x4, 0x11c, 0x10001, 0x4, 0x4, 0xc60a, 0x40, 0x8, 0x40000, 0x6, 0x0, 0x9, 0x2, 0x7, 0x7, 0x7, 0x4, 0x9, 0xc210], [0x52, 0x1ff, 0xfa, 0x7, 0x8c, 0xa, 0x5, 0x6, 0x2, 0x745, 0x1, 0x0, 0x61, 0xffff, 0xa8b1, 0x8, 0x5, 0xfb, 0xffff, 0x6, 0x0, 0x0, 0x3, 0x10000, 0x6, 0x7fff, 0x6, 0x7, 0x401, 0x8000, 0x80000000, 0x0, 0xffff, 0x8, 0x1, 0x6, 0x0, 0x2908, 0x2, 0x6, 0x0, 0x1000, 0x5, 0x8b2f, 0xd, 0xffff2cbf, 0x7fff, 0x5, 0x7, 0x8, 0x101, 0x7, 0x1eb, 0x8, 0x28, 0x4, 0x4e, 0x8, 0x2, 0x3, 0x6, 0xf, 0x5, 0x3], [0x3, 0x1, 0x9, 0xf, 0x7, 0x81, 0x7, 0x7, 0x2, 0x8, 0x0, 0xfffffffe, 0x100002, 0x6, 0x2, 0x6, 0x0, 0x7, 0x6, 0xf4dc, 0x8, 0x7ff, 0x0, 0x7fffffff, 0xfffffff9, 0x0, 0x2, 0x6, 0x9, 0x6, 0x3, 0xfff, 0x10001, 0x7fffffff, 0xfffffffa, 0x401, 0x4cdc1a6e, 0x4, 0x6, 0x3, 0x8, 0x0, 0x2f81, 0x200, 0x80000001, 0x1, 0x4, 0x8, 0x3, 0x9, 0xffff, 0x8000, 0x5, 0x1, 0xc, 0x1, 0xa, 0xfffffffa, 0xd, 0x8, 0x7, 0x8, 0xc4, 0x10001]}, 0x45c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500008dbccf538d2b09df4ee2e96e255f100094000ab79c"], 0x28}}, 0x84) 6.193343149s ago: executing program 0 (id=11834): r0 = userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x30, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x10000}]}, 0x30}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) 5.813287042s ago: executing program 0 (id=11837): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 5.678959038s ago: executing program 42 (id=11837): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 5.273682903s ago: executing program 5 (id=11840): r0 = syz_usb_connect(0x4, 0x54, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xde, 0x2f, 0xb5, 0x20, 0xdba, 0x3000, 0x4a38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x9f, 0xf3, 0x0, 0x8f, 0x9d, 0xc8, 0x4, [@generic={0x30, 0x22, "515e52f256505009bb8150c53b58703875cffb5996cf0fa0279e3cb35652d304e8342b6e045c0781a26657740ecb"}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.853402828s ago: executing program 7 (id=11842): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 4.445132904s ago: executing program 9 (id=11843): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES16=r1], 0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="53e67a30e57e15cdf0d1", 0xa) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlockall() r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x19) accept4$alg(r0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x80012, 0x80000014, 0x1e4, &(0x7f0000000880)="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"}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000001414e9ff"], 0x10}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8041, 0xe) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0xffffffffffffff3a) 4.420499742s ago: executing program 5 (id=11844): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010209cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000001109400c0904080601ff8bbd020a240107000d02014db8240503ac5f"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xc) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000003c0)={{r2}, "30c4ef2b0dd28a7764dde42ad3720c7fa47b18e1cfacaaee86c28321337e4f51a0cb8ee73248c2950a7798c16104791aff6d068cbae62aa854e1a9af2beb5ed6cf11aef7d0ea2573082eae590c49d33372259f7992de9b9a55a278d531c134148382781570db13a325fa88a3280eaca071d6e0017d9b38ee44d34da3ed2f2dd7b178e7786bcfa6e2280501baf1e2a6a39a6202827f40e5b0d35f53d45acc6be4d21b10a4c6fe52fdfef65721c6b3c2a10cbf2202097ac0e818e5759deb80a1eb691b26c5b6557b79e03b0a8eedb921b8eee09dc2e12a51451914c6eec866b3cd037ad516ef9fb77d62f2388be0ccd18dd75974fbb75225993ba8e0c1fe56181cac5a31f38b9c88e564dd9713e6cb2b44a5b6c4053fa8050ddec5d2ffc1cf8275e7cd53d704d57aff22966878a4c23ffb02ff9928e7fd71b6349622252d784ecc19cbced6f0bb3f132ed0721f451cac9d313662c68ce2b730abd1e05a41188aecec1d7ff1aadd2bda0e8b88f31068bac339421ebe4fe12fd9c4ede8401deae06103b7968b3af2e8c0495f536100e1b27da11e906f9b5d09776d966baa3f7213c7bd44fc155311e513def3479ca1c0248d0ed69259e83de09f32f075005b4db12c5b8262be3fe7c84b99105ce17204775e6a8225f16a0c3809f202f4151fa1d2c162fb5e58714c72a497e147e13ebd66b770f5992427bc5b4f082aff998ba6622bf55d0ea7a8213e70ec870242d4cf7adf08d0713a40d35239830146cf880c378f6c1fb589b31ac73f96575d29bba2028fdc37afd880d4b723036d46ca7f6609ea9bb4c1637d738d9fdf718cdeff55bc079255fdb8c647271915ff5dfdd83ae8dd622061709817591b0e8ffbb3cd4e982f6804ff4e9e54ccb19c91acbc7160b95a8fc72a5107117639505caf49449605e0ce0a445172659b3da2f20f7f4c5fb7828e4f15605ac0d011a61cef78f413a685ec5cbd8ef3eeac3ab557c9785ed6d5a70f87eb0334fce10699ba939e0f08ee22023c84df5978d50d1ee7b34a10a0db29d751fa90c111ef600ff3bde5f8c5456c24647edd9956fd4604ebb5a2adaaa138d2819a5f2279b95a45604cc54c4e486fea17601722690956566125eec275bbe4fb2f96278fbc4c32758d8f3388aac526700ae296b4045fe0535c4626906f6f060ab14e9f77385219163cf8279750f4e14310af79b6a20dc848bf338a3418716862c34889544f2c8bf6ad1343c8047f8d932626a1199d2437e0e18fbc824fc380fdbbdb03241953ee48050a517fb05bbb5a29ef114f78c7abcf7281dcc193621eac9ce0350db178c90d1411549bf9fde8b8f115a24311f17be3867731917f0093a36b4e686c1fc9bac53e4ad9e118990eea2e463be563d5a5f382fab189f069f1da99c8bed242381f6d7248b32bc31d7c4767c196eeca885df67b9efc580b8c02b0207ad1ef7e6adb394b875662d237b00f65db829d0319ec4abb61a813fe7aa3f24dd6a0ffebb4a367b24397f23ad4256621200134c7c63e356aa3afd55a6b2721ce6254e227a9f6c19b3d85e3f626e0fba3d6755bd3875b4316d684cefa7cea3f52b7589af412f9504a020759aff87a39d3fd895ca689af8d3d7c9c4f0094ebad49b0d9bbe0dcbb8f3e0a4b5e85de9fb8ad945cd8db3c575c8fd089b8889bf7701b8d6c85dd18a71d5c5081317e9af574aa55a77c34cb8dc96a11ea8f84d660091a61aeb99c2dff0bde3a447f2aaf6898a2baedbc38d1654c72fbbc399b7329d615804e4c5c9d2501a2cb3e488ed138fc1eeb3a236d7fda127cf19413e345accc5dc81b57bfdc2f79e6f49210ff91785f6eaf6ebf9bb8203203c4e62c37794738fb690f7f7e09b3a6de5971b001207ddf762c3018d4f9d38a1afd5338ce63ab7761b1e2122427d632f24f9b741ac7908c9fabfbabe06daee1773deb2f852ff9619503f8ef152dcdbb90db23d3166967019f69dac1a44b685b7539c57d1593f3aad0fb8d45a9d9fe3d1c710546152604f690e065de1ac13017d6649bbbce8be951074c0b952af5539455b667daad6ade071f94430f92a6616751e6859aa3e7fcb9bc34aaf6a9bfc13bdcadd9ef0e116a872fbb7b4bddd40ee09b9bbc9343aaac2373a6de061027196a56c47a6d9557cd52c627cfc614086d98837f8dd1aaac7ed5dc53f8ec9b368dee24d18d8d10ccfe9de2ff0b2d483abfb5f1178612109235e4aed61b8d88567e5e7ddca6fec64663767f364e735424fc35a18fe2621af3fa16a734ff7350f46646d2ce2817554aab1338f7a0ac9b821e51d1efa8a7011d77b006709a7915bba7fa69cea0bd67363f5e3c18a1fb080178881d38ef214eba5bb4d83f68c57647b21b9e0d2bff523afa14cad12f540be70f68e1cc4660b23d47d358e4c38c871183cb555b4792e2ae878d277ca7df1c8538696ad985615697a930bf772f38218cf6ac6a594035921e20d0b74691517f594cfeb878fdd983fabfb33809775b2899644cebe6f94172e3625ab8d07eba436883a83ae07c03088cc7e9df33acaddfbc25c9e905b10c6ca020282a83d02cb72900f8000e60116370d518ff90b8a85b47469df03597b0c1792ad79e9b93545eeea2f05a39164172ef1d79f7cd83aa117a269f01e0d7703452f01901e2586cf22b06e33867e10c5d011708db544f5f88cbfc04466400a7397a7de65f742f363235eeaabe4ffbd736af6e3ac84c972005bba756e28fe9f141cb9ad2e108583dbe49d2cd18f245f963feb15bc6ade4547ce21a02b87d41612742c9e77f548fa3f935f3fb09408bcdc2db101d90206cbc0dea41c9458dad9ccbbd99499a9939d38489e86ce52fd755c986c8f0cb448b3a2a7e96696fbdbf130088f04f949de7911d58b03ab186a1c7cd5b3469a6c365a9af96fcd85fa2ba296de693e77e23423f53402377b06f9f54f36959dd5cd47a79eb7865dca5dafe6e23cef705d37adc967d6928e139acc9da5a6d9c9e7e7ca2a37b7759f9b4d4a6ab984042e4a0c79498b27e12a91e8fb2821db228cc6df9cef4a3801a2ab5c5f4f1d85b9ff907e781979a4881ed1ccc76103a6e5e2bbc7b01b88cb1946c86644ec11e9a26ed7116c0ec4402f148e5c5f103e53ce24107e07ba9312590a49b41099b440f11ea53675980d69a33ebf26125427f9ff3d0571acea55fa02f5cc9a9fdf203013a4c35321c75bd85735f0134aefb5627727289035eaf1b37a5877a102f2990c39a93c2fb9897223ae77835b61e7150485b493357296fa3a1240596f919847655e85ce64ea3822fe80067b2e40411c11717535ead5b63cc49ec8ed0f0a4317314391023ed25f9d238771d55a3b48168e2822f0f4ad6042fe1b613c732ee3bbdbdc8546efd37e60cfe2093d931d8ae37602921174c747354d847fbafcf9b1e223eda52503d26851ea3781b3915d75862ae739e8ac090dcdfe0e67122b37d37896446fdc750cf60a62fa1eea59da6c0b13b131dbaf5c1d2666ba1f228bd362556d556e4245f4c6ed43809c80b7d4d669d5b17ed3ea2c6e24bd29f7a4ff2095ebdfc865344875001da4d4aeeacc48134a2713c0299cd52213165db55eeea26f0c6f0f9537ae1411df9ed04bd79c00a9328421e6140a64f14793c3ca0f5761845b4192fda9dc3fb23a5969c2d4521c6db5f8672797c530bb06c71b145f45f80d0ce5b60b1ec9881dfedb4b6d2bea7466db73b050555af27507869a2e7db15b7b409593216cdf7dcf35ddf1b679a69fabc97f2266e18d4a7e77d09d78036945b4695cb47a8455a8cc7b4784ff76a4e248f887c1c3727cbb612fe83801ef53784fb265ab3471866560d4608c11f1deb8ed8a52602c5796af34bd8ff2956c34c483f01f31fb3e44f8d73507814c082db4054d77ea2c3def254f0eeef63be8d006e25c23c551fd5c03a602accbfbb47c60243cd1c2842ce4640ddb26fb9d153fa869fcfc85fae195ab9972322aec11bdfed0b2da9320033f68a73428992a0fe835b4ea23a2c72c89a2625afad282f011bb997e5a7ea87f46b685ac4d5f365d74314c9dc9ad3a8ab98c8c936e0d0b379a35ad7f741cdeab44b489d17923b30e2edd1d63152cfc800ed474a8b5fe1d79ef98607fc65a2656ef666809482e5b160b4ed71117f4e0dbdbc56d6cf7d7089643aa51c5dac1fa656a1be5811a10620e80f8097a4c18d40244cc5894a75a0d5c2a9b9eddea98ac392ee6b86eefd1c89520c274b956d7b71c2b150004af89303879bfa809f2b15370058c2e14c9874c4901df96392b2d1f30004777293670a9cd36559d1d335dadfdf659d1a41103de26fc4fd8ca71319ef929ea7e60c535d5f6ff9bb37dbe3e51aa3da2c2002c515d77f510544e0838d566080655fab4c519d1d4beaf9aaba276a148f7d72f84e2878210a7977936bfa2e0f456c43a80fc39f295878b63b189d6c75febafa2f1235be9d9f9421c7f19448cbf669418b1b50b5f0ec81f9184fb40f6e4f02c186c8ffd74eb63f3a212c3f3f2969190b1730b02bd2278f4df783f8cb60c96dc34781c265e8e50a7478be5e0b3ed881ac0dc873c4c82f7d38d3a9c6e2ef4c9d3df2ec5d7cea795ec24610bf57ba6fe2c9660965b7f34dc8be3dbcdc94456998cd092178c997e3e18f4ce6d35b918d20775a9c90df12b4ad82dfafe9f8beb71676f5138500d45760802b877df3453672e322022f5bcefd9ca3b3aad8935986ea7fe535aa21abb738bc2bfb97ca69304e7c99178597b2bfa5ddc283476b48b470534e0e0adf9e8c71ac35ffd9fd2b4ff0a83eb70a6f3e244d4793bbaec9754f221eb261e0169ab0f8487e9bc6b6c72f96de1cddd3519e8babc2caf9f2c83e5669accb1dbb4f384c3b233445c17daa9575b16faff701f2084d24e10bb334ab92c3dee00b96876fe7f06be8ca2ba4632992a3a318343c0943bc02b545a813578675983e48f856b29906ae8ba272c7d03796289dd4c4fb7571805b28e8762d4e21f0774b4bbbc56be0beda3e8cc99a519b40684a7aaadd043d003f3c6b8d29fc50e5321860bd78ee934c51446cef0e45834160eb96e947aa8d453f29b64a10e2b1bd60e03f8b8167f54932112f1b9b44aa873477793832bca538d8e7403297222c129b150edb16b5ac22388f9476486fc02604bb59abde45f75d45e210dfb962c86931b97b9a79343cb0f55aadab41671c352f7210c1501055e7d42b64b56a90f34f99a332b452a2a4cf8c4658505248a3b514f81cbbd89b2245e5de5bb0d60d27076d009728180c6c7fe190dc3ac27a18d56beda4aac0e0e79d2c848537a1a31e23c1b5d9d7d2db9e6584f34a8d7409c0c800b38ffee94334931ffd40b2e016d2f81df09cab13b1b4aca28768289f97682d07a8fb778eedfa2eb55d36572a63be5e87ea0de093c30fb178fe9a77cb017dfcf2fa8c2585a86bcc1ffb0b4fdf5be2c0334d4912d4c008508b4fe80d0580c57a236a45f67fcf2fb486eeedc36004dd779155f043d0159e3584bebb9bc42543a36c37a5edeeca622e02e7798c35ff86361b1840597f36a67789cc5f0325f0d5ac8c33e9d66877d1e0649f334005c8519b1b641d326c08491213cfc22e1f9adf70e9b129ca66124781920f8dc39907b9f7042302fc59640cce7be5b759db25fdcf46250a07663c59b3129d3fa5b0119c3788cdcebb4570d82f1cc74b3bfed039fc409e892a755e8660307ee612ccca726c931d6fde36367e57c764bfbe5c768c8467cde79e9e1bffd98ead3a9cd4315a460e123e82e675dd66168089dbbb53f562029f1f49"}) ioctl$FS_IOC_GETVERSION(r2, 0x40015b19, &(0x7f0000000040)) (async) r3 = socket$inet6(0x10, 0x3, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) read(r4, &(0x7f00000013c0)=""/4107, 0x100b) r5 = fanotify_init(0x18, 0x1000) (async) r6 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x8000000, r7, 0x0) (async) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0xe0, 0x0) (async) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 4.213839083s ago: executing program 7 (id=11845): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x28, 0x1, 0x0) connect$packet(r1, &(0x7f0000000500)={0x28, 0xe0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000540)='\v', 0x1, 0x24000081, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x3, 0x2, 0x3, r7}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r7, 0x7, 0x10}, 0xc) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 4.161298355s ago: executing program 7 (id=11846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0xd, 0x200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000200)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r3 = syz_open_dev$video4linux(&(0x7f0000003bc0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000003cc0)={0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003c80)={0x0, 0x0, '\x00', @string=0x0}}) (async) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000100)=0x8, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b00)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff24086ca9e34393389cf8a0c4f0d510b5568c56691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b49ba8f59454bb114b4d16ea984dfd3462fea0c1490768b8a46418d7f46c5aee61f4b5d100b4e7e09331052c7c64738cb229e389bc92d6e183e486b9ace47877563a5ca3377fabe1c1df49bcdc4f234e6552606895355340a65d1d8a6c303fec7c5fe9d045c3bc0266edef549f225f7e7f61f560bdafe4485fde57bd4f8968471171abb1d9e1c1b3590dbbcae125db4fb3091bf164385fe4e91772ffd1fab70d21", 0x37e}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 4.092045681s ago: executing program 7 (id=11847): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0xf000, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400316"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4f812cbd7000fbdbdf255100000008000300", @ANYRES32=r5, @ANYBLOB="05008a"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0x31, 0x65, {0x65, 0x2, "7d58fc024c43ad6f2cdf8d34b2c52c2fc37c72adf3309f3eaf7088f921dda17da0723bec26aec909e0c49e515caed461063205144947de9224892d89e02e53ae148274a214e3eff1bfe36e9e920cb73dc5d4020b2716fde5ee7ed4b0b7a0c248dc8579"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000540)={0x40, 0x31, 0xe8, "0bf3490206c925bbdb306ae758c5c2b678d4c281ca2959d54e3a596ab4b9ae6ac9e680d0a9d2f1045345db4989328d88a2458172afbd4a0af5bdfdfbf1be557c6c82884a6be629d0c8cb70607bf4da6af581453e8bc45f7d1106af703109448a428ed868978bfe7928253069618e7955e6040050830ab518fe7054f29d9798749940f857a884f3fa9ec85f70bacfbdea151bc8de7a200d8168433bdd299100fa0aa5ad26eb0dbae866fa4760884d144f67db6b2af5f91596962d6451b9c8a7b1e2d38a404348719a5595836c2ed9d57e12247966fb290149590e378b51a9b91319feef5cf7d9bd28"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000300)={0x20, 0x81, 0x2, "e95f"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "82d5"}, &(0x7f0000000480)={0x20, 0x83, 0x1, '}'}, &(0x7f0000000640)={0x20, 0x84, 0x3, "c44360"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "d00f21"}}) syz_usb_control_io(r6, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x3552}]}) (async) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.697117732s ago: executing program 5 (id=11848): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1712c1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x200}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "289d7c5d9f6ed78631aba46fb0d1aa1a1f81405268ff8f552c859f06c11658d1f86696b6c94f65d17bc50d650e3e2ee4a71ef85c617e3197b847a7df946cec09546e72f5304fdf9349eabe7859d7d5c9a1443227f6d3f286778093616d8f540c926a8c7d031afafcc469a630dd31c14d714b8bff6cd5c5902c69255ebb9a930477f3d346630dbcb79adee6ee1f81525ad4b17d89d6ee9eeb2149b7daaa09be5f8ec57e93a838cd6e6964482b864fdff516956f3bea439675fcfb851071f22f98b4557ae37d23b52134b43841c83286175cb803f8f335bf0ecdd7074bfae1be"}, 0xea) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x333, 0x40000001, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x7, 0x0, 0xf0}) (async, rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 32) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000c17000/0xa000)=nil, 0xa000}) (rerun: 32) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x36) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f0000000400)={0x11, 0x1c, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) r8 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) write$cgroup_subtree(r5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 3.455535925s ago: executing program 5 (id=11849): recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f00000009c0)=""/181, 0xb5}], 0x3, &(0x7f0000000900)=""/101, 0x65}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r3}, &(0x7f0000000300)) r4 = inotify_init() r5 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x33, 0x2, 0x0, "bc3e098e0000f4ba89591da86b97000000002b00030400"}) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r8, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) ioctl$IOMMU_IOAS_UNMAP(r10, 0x3b86, &(0x7f0000000100)={0x18, r1, 0x4, 0x8000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 2.700078468s ago: executing program 9 (id=11850): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000003030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 2.565504116s ago: executing program 9 (id=11851): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4aedd8135935d6d0}, 0xc840) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) 1.793044621s ago: executing program 9 (id=11852): socket$kcm(0x21, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) r1 = socket$netlink(0x10, 0x3, 0xb) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000080)=""/119, &(0x7f0000000180)=0x77) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x160, {0xd34b, 0x7}, 0x10, 0x4}) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x7, 0x0}, 0x20000095) 1.594584898s ago: executing program 9 (id=11853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003300000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131"], 0x184}, 0x7ffffffe}, 0x0) 1.459247472s ago: executing program 9 (id=11854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x4f97, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) (async) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r2, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000180081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4023edffff0e080c2d91419da546"], 0x0, 0x0, 0x0, 0x0}, 0x0) 806.499267ms ago: executing program 7 (id=11855): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800c0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xcb, 0x8e, 0x39, 0x8, 0x421, 0x10e, 0x8c2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x2, 0x2, 0xff, 0x3}}]}}]}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 105.222994ms ago: executing program 5 (id=11856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = fsopen(&(0x7f00000002c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', &(0x7f0000000000), 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="405c2e6a8668d75d804d74b55a24d88e15000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000001c0004800500030001000000050003000000000005000300070000000800020003000000"], 0x40}}, 0x0) 9.446318ms ago: executing program 7 (id=11857): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xd, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0xffff1000, 0x5000, 0x0, 0x9, 0x8, 0x3, 0x6, 0x8, 0x9, 0xf, 0x3, 0x2}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x9, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0x5b, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x81}, {0x100000, 0x11000, 0x8, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0x10000, 0x3, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xa, 0x9d, 0x2, 0x0, 0x0, 0x4b, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x3, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x4009}, 0x40010000, 0x0, 0xf000, 0x340, 0x5, 0x2000, 0xd000, [0xffffffffffffff47, 0x6, 0x40007, 0xc5]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) semctl$IPC_INFO(0x0, 0x9fb4e6741702f3d4, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3008}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0xf000, 0x2000, &(0x7f0000005000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=11858): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000380", 0x4c, 0x20000000, 0x0, 0x0) kernel console output (not intermixed with test programs): 2065][T14884] netlink: 'syz.1.11287': attribute type 5 has an invalid length. [ 1978.960950][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11288'. [ 1979.016836][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1979.025164][ T9888] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1979.037132][ T9888] Bluetooth: hci4: Injecting HCI hardware error event [ 1979.047041][T21544] Bluetooth: hci4: hardware error 0x00 [ 1979.097941][T14905] netlink: 'syz.9.11291': attribute type 4 has an invalid length. [ 1979.239089][T14922] input: syz1 as /devices/virtual/input/input210 [ 1979.444501][ T7011] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1979.615725][ T7011] usb 10-1: Using ep0 maxpacket: 32 [ 1979.626992][ T7011] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1979.646957][ T7011] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1979.661865][ T7011] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.676435][ T7011] usb 10-1: Product: syz [ 1979.680796][ T7011] usb 10-1: Manufacturer: syz [ 1979.685652][ T7011] usb 10-1: SerialNumber: syz [ 1979.698204][ T7011] usb 10-1: config 0 descriptor?? [ 1980.117576][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1980.129272][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1980.133402][T14961] comedi comedi3: pcl812: I/O port conflict (0x4,16) [ 1980.151722][ T7011] gs_usb 10-1:0.0: Configuring for 2 interfaces [ 1980.193733][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1980.700380][ T7022] usb 2-1: USB disconnect, device number 38 [ 1981.240453][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1981.249953][T21544] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1981.397259][ T9888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1981.408361][ T9888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1981.417828][ T9888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1981.428481][ T9888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1981.436422][ T9888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1981.481228][T14988] lo speed is unknown, defaulting to 1000 [ 1981.502341][ T7011] gs_usb 10-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1981.539969][ T7011] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1981.595405][ T7011] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -32 [ 1981.722690][T14988] chnl_net:caif_netlink_parms(): no params data found [ 1981.824167][T14988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.832114][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.840362][T14988] bridge_slave_0: entered allmulticast mode [ 1981.847897][T14988] bridge_slave_0: entered promiscuous mode [ 1981.858674][T14988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.866378][T14988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.874219][T14988] bridge_slave_1: entered allmulticast mode [ 1981.881689][T14988] bridge_slave_1: entered promiscuous mode [ 1981.923848][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.938326][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.985056][T14988] team0: Port device team_slave_0 added [ 1981.993836][T14988] team0: Port device team_slave_1 added [ 1982.034478][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1982.041544][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.068693][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1982.081291][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1982.088975][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.117308][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.173776][T14988] hsr_slave_0: entered promiscuous mode [ 1982.180368][T14988] hsr_slave_1: entered promiscuous mode [ 1982.189266][T14988] debugfs: 'hsr0' already exists in 'hsr' [ 1982.196068][T14988] Cannot create hsr debugfs directory [ 1982.362304][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1982.378427][T14988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.411354][ T5914] usb 10-1: USB disconnect, device number 93 [ 1982.493789][T14988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.567499][T14988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.647874][T14988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.801360][T14988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1982.811341][T14988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1982.822308][T14988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1982.833691][T14988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1982.855066][ T5914] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1982.946145][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1982.988225][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1983.004303][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.011541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1983.025265][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.032542][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1983.053398][ T5914] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.069243][ T5914] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1983.084465][ T5914] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1983.100645][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1983.108791][ T5914] usb 10-1: SerialNumber: syz [ 1983.281043][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1983.464302][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1983.498720][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1983.513457][ T5914] usb 10-1: 0:2 : does not exist [ 1983.549058][ T5914] usb 10-1: USB disconnect, device number 94 [ 1983.625832][T21016] udevd[21016]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1983.642120][T21544] Bluetooth: hci1: command tx timeout [ 1983.768706][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1983.778365][T14988] veth0_vlan: entered promiscuous mode [ 1983.806958][T14988] veth1_vlan: entered promiscuous mode [ 1983.839148][T14988] veth0_macvtap: entered promiscuous mode [ 1983.849733][T14988] veth1_macvtap: entered promiscuous mode [ 1983.873079][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1983.898263][T14988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1983.919683][ T7493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1983.942267][ T7493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1983.951505][ T7493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1983.961856][ T7493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.000703][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1984.093370][T15411] binder: 15410:15411 ioctl 40046205 0 returned -22 [ 1984.094809][ T7495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1984.135898][ T7495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1984.169704][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1984.182562][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1984.194870][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1984.343076][T15432] ÿÿÿ: renamed from team0 (while UP) [ 1984.577380][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1984.602215][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1984.682370][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11317'. [ 1984.970282][T15471] gfs2: gfs2 mount does not exist [ 1985.100601][T13437] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1985.294553][T13437] usb 10-1: config 0 has an invalid interface number: 151 but max is 0 [ 1985.302861][T13437] usb 10-1: config 0 has no interface number 0 [ 1985.310520][T13437] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=ad.73 [ 1985.320148][T13437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.331406][T13437] usb 10-1: config 0 descriptor?? [ 1985.340968][T13437] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 1985.352268][T13437] dvb-usb: bulk message failed: -22 (2/0) [ 1985.366132][T13437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1985.376792][T13437] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 1985.387015][T13437] usb 10-1: media controller created [ 1985.408018][T13437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1985.432790][T13437] cxusb: set interface failed [ 1985.437654][T13437] dvb-usb: bulk message failed: -22 (1/0) [ 1985.443664][T13437] dvb-usb: bulk message failed: -22 (3/0) [ 1985.449420][T13437] usb 10-1: bluebird_gpio_write failed. [ 1985.474541][T13437] dvb-usb: bulk message failed: -22 (3/0) [ 1985.480314][T13437] usb 10-1: bluebird_gpio_write failed. [ 1985.513011][T13437] DVB: Unable to find symbol dib7000p_attach() [ 1985.519347][T13437] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 1985.592787][T13437] rc_core: IR keymap rc-dvico-mce not found [ 1985.598837][T13437] Registered IR keymap rc-empty [ 1985.612385][T13437] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1985.626235][T13437] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input211 [ 1985.640523][T13437] dvb-usb: schedule remote query interval to 100 msecs. [ 1985.647797][T13437] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 1985.662798][T13437] usb 10-1: USB disconnect, device number 95 [ 1985.675213][T21016] udevd[21016]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.9-usb-0:1-event-ir.tmp-c13:68' failed: Read-only file system [ 1985.688384][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1985.727596][T13437] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 1985.859287][T21544] Bluetooth: hci1: command tx timeout [ 1986.395249][T17594] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1986.564893][T17594] usb 6-1: Using ep0 maxpacket: 16 [ 1986.573753][T17594] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1986.583668][T17594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.591839][T17594] usb 6-1: Product: syz [ 1986.597451][T17594] usb 6-1: Manufacturer: syz [ 1986.602066][T17594] usb 6-1: SerialNumber: syz [ 1986.611219][T17594] usb 6-1: config 0 descriptor?? [ 1986.619838][T17594] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1986.693181][ T7025] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1986.800864][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1986.836184][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.846456][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.854950][ T7025] usb 10-1: Using ep0 maxpacket: 8 [ 1986.860291][T17594] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 1986.869149][T17594] visor 6-1:0.0: probe with driver visor failed with error -5 [ 1986.877364][ T7025] usb 10-1: no configurations [ 1986.882388][ T7025] usb 10-1: can't read configurations, error -22 [ 1987.035323][ T7025] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1987.206389][ T7025] usb 10-1: Using ep0 maxpacket: 8 [ 1987.212173][ T7025] usb 10-1: no configurations [ 1987.216877][ T7025] usb 10-1: can't read configurations, error -22 [ 1987.223551][ T7025] usb usb10-port1: attempt power cycle [ 1987.591508][ T7025] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1987.613465][ T7025] usb 10-1: Using ep0 maxpacket: 8 [ 1987.619153][ T7025] usb 10-1: no configurations [ 1987.624065][ T7025] usb 10-1: can't read configurations, error -22 [ 1987.762321][ T7025] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1987.786110][ T7025] usb 10-1: Using ep0 maxpacket: 8 [ 1987.791936][ T7025] usb 10-1: no configurations [ 1987.796678][ T7025] usb 10-1: can't read configurations, error -22 [ 1987.804573][ T7025] usb usb10-port1: unable to enumerate USB device [ 1987.886599][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1987.922740][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1987.958459][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1988.020470][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1988.033841][T15558] binder: 15557:15558 ioctl c0306201 200000000080 returned -14 [ 1988.042946][T15558] binder: 15557:15558 ioctl c0306201 200000000640 returned -22 [ 1988.052127][T15558] binder: 15557:15558 ioctl 4018aee3 200000000100 returned -22 [ 1988.094450][T21544] Bluetooth: hci1: command tx timeout [ 1989.035315][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1989.360658][ T7025] usb 6-1: USB disconnect, device number 12 [ 1989.796457][ T7025] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1989.965178][ T7025] usb 6-1: Using ep0 maxpacket: 32 [ 1989.976704][ T7025] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1989.985549][ T7025] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1989.998474][ T7025] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.009372][ T7025] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1990.018716][ T7025] usb 6-1: config 128 has no interface number 0 [ 1990.025081][ T7025] usb 6-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1990.039078][ T7025] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1990.049364][ T7025] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1990.059416][ T7025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.068060][ T7025] usb 6-1: Product: syz [ 1990.072692][ T7025] usb 6-1: Manufacturer:  [ 1990.077303][ T7025] usb 6-1: SerialNumber: syz [ 1990.136055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1990.200055][ T7013] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1990.305201][T15575] netlink: 'syz.5.11334': attribute type 4 has an invalid length. [ 1990.313219][T21544] Bluetooth: hci1: command tx timeout [ 1990.324291][T15575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.333719][T15575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.346202][T15575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.356800][T15575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.363396][ T7013] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1990.375027][ T7013] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1990.389347][ T7013] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1990.397067][ T7013] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1990.406975][ T7013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.420183][ T7025] usb 6-1: USB disconnect, device number 13 [ 1990.423599][ T7013] usb 10-1: config 0 descriptor?? [ 1990.464177][T21016] udevd[21016]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1990.870367][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.874928][ T7013] kovaplus 0003:1E7D:2D50.00A6: unknown main item tag 0x0 [ 1990.881727][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.893252][ T7013] kovaplus 0003:1E7D:2D50.00A6: unknown main item tag 0x0 [ 1990.900021][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.901508][ T7013] kovaplus 0003:1E7D:2D50.00A6: unknown main item tag 0x0 [ 1990.913014][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.917592][ T7013] kovaplus 0003:1E7D:2D50.00A6: unknown main item tag 0x0 [ 1990.931908][ T7013] kovaplus 0003:1E7D:2D50.00A6: unknown main item tag 0x0 [ 1990.946948][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.956549][ T7013] kovaplus 0003:1E7D:2D50.00A6: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 1990.968469][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.981098][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.996419][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.007814][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.018839][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.057221][ T7013] kovaplus 0003:1E7D:2D50.00A6: couldn't init struct kovaplus_device [ 1991.065448][ T7013] kovaplus 0003:1E7D:2D50.00A6: couldn't install mouse [ 1991.088358][ T7013] kovaplus 0003:1E7D:2D50.00A6: probe with driver kovaplus failed with error -5 [ 1991.111973][T15663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11342'. [ 1991.248669][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1991.405752][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1991.417414][ T7013] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1991.443036][T15680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1991.454697][T15681] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1991.506151][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1991.569147][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1991.579810][ T7013] usb 6-1: Using ep0 maxpacket: 8 [ 1991.585503][T15697] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11346'. [ 1991.595748][T15697] hsr_slave_0: left promiscuous mode [ 1991.600793][ T7013] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1991.610107][ T7013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.610163][T15697] hsr_slave_1: left promiscuous mode [ 1991.618355][ T7013] usb 6-1: Product: syz [ 1991.618376][ T7013] usb 6-1: Manufacturer: syz [ 1991.618393][ T7013] usb 6-1: SerialNumber: syz [ 1991.622548][ T7013] usb 6-1: config 0 descriptor?? [ 1991.759104][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1991.817700][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1991.879087][ T7013] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1992.054117][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1992.271412][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1992.337717][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1992.370556][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1992.416819][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1992.420456][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11352'. [ 1992.524885][ T7013] gspca_sunplus: reg_w_riv err -71 [ 1992.534754][ T7013] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1992.549757][ T7013] usb 6-1: USB disconnect, device number 14 [ 1993.182130][T17594] usb 10-1: USB disconnect, device number 100 [ 1993.477947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1993.498081][ T7011] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1993.654743][ T7011] usb 6-1: device descriptor read/64, error -71 [ 1993.878037][T32722] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1993.910128][ T7011] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1994.043847][T32722] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1994.053178][ T7011] usb 6-1: device descriptor read/64, error -71 [ 1994.059476][T32722] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.068179][T32722] usb 10-1: Product: syz [ 1994.072793][T32722] usb 10-1: Manufacturer: syz [ 1994.077528][T32722] usb 10-1: SerialNumber: syz [ 1994.167063][ T7011] usb usb6-port1: attempt power cycle [ 1994.302470][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.311826][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1994.535433][T32722] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1994.539675][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.548981][ T7011] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1994.558981][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1994.568620][T32722] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1994.583815][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1994.593219][T32722] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1994.606050][T32722] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1994.619145][ T7011] usb 6-1: device descriptor read/8, error -71 [ 1994.628692][T32722] usb 10-1: USB disconnect, device number 101 [ 1994.893896][ T7011] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1994.916956][ T7011] usb 6-1: device descriptor read/8, error -71 [ 1995.035460][ T7011] usb usb6-port1: unable to enumerate USB device [ 1995.696782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1995.759828][ T7011] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1995.921401][ T7011] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1995.931915][ T7011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.942794][ T7011] usb 10-1: config 0 descriptor?? [ 1995.952932][ T7011] cp210x 10-1:0.0: cp210x converter detected [ 1996.598948][T15909] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11369'. [ 1996.609277][ T7011] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1996.617447][ T7011] cp210x 10-1:0.0: GPIO initialisation failed: -121 [ 1996.629323][ T7011] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1996.687240][T23702] udevd[23702]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1996.807743][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1996.824881][ T7011] usb 10-1: USB disconnect, device number 102 [ 1996.837604][ T7011] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1996.847412][ T7011] cp210x 10-1:0.0: device disconnected [ 1996.893588][ T7022] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1997.054821][ T7022] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.065517][ T7022] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1997.075151][ T7022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.085579][ T7022] usb 6-1: config 0 descriptor?? [ 1997.094362][ T7022] pwc: Askey VC010 type 2 USB webcam detected. [ 1997.529175][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11370'. [ 1997.755429][ T7022] pwc: recv_control_msg error -32 req 02 val 2700 [ 1997.771373][ T7022] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1997.785677][ T7022] pwc: recv_control_msg error -71 req 04 val 1000 [ 1997.792582][ T7022] pwc: recv_control_msg error -71 req 04 val 1300 [ 1997.799340][ T7022] pwc: recv_control_msg error -71 req 04 val 1400 [ 1997.807545][ T7022] pwc: recv_control_msg error -71 req 02 val 2000 [ 1997.814576][ T7022] pwc: recv_control_msg error -71 req 02 val 2100 [ 1997.821352][ T7022] pwc: recv_control_msg error -71 req 04 val 1500 [ 1997.829311][ T7022] pwc: recv_control_msg error -71 req 02 val 2500 [ 1997.836520][ T7022] pwc: recv_control_msg error -71 req 02 val 2400 [ 1997.843280][ T7022] pwc: recv_control_msg error -71 req 02 val 2600 [ 1997.851189][ T7022] pwc: recv_control_msg error -71 req 02 val 2900 [ 1997.858768][ T7022] pwc: recv_control_msg error -71 req 02 val 2800 [ 1997.865730][ T7022] pwc: recv_control_msg error -71 req 04 val 1100 [ 1997.873363][ T7022] pwc: recv_control_msg error -71 req 04 val 1200 [ 1997.881828][ T7022] pwc: Registered as video103. [ 1997.897808][ T7022] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input212 [ 1997.918864][ T7022] usb 6-1: USB disconnect, device number 19 [ 1997.925841][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1997.957136][T21306] udevd[21306]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.5-usb-0:1-event.tmp-c13:68' failed: Read-only file system [ 1998.037134][T13437] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1998.199365][T13437] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1998.207691][T13437] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.218081][T13437] usb 10-1: config 0 has no interface number 0 [ 1998.224467][T13437] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1998.234536][T13437] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1998.249828][T13437] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1998.259087][T13437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.267521][T13437] usb 10-1: Product: syz [ 1998.271789][T13437] usb 10-1: Manufacturer: syz [ 1998.276593][T13437] usb 10-1: SerialNumber: syz [ 1998.284315][T13437] usb 10-1: config 0 descriptor?? [ 1998.512676][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.523084][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.534587][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.547550][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.616788][T17594] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1998.787202][T17594] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1998.796415][T17594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.807555][T17594] usb 6-1: config 0 descriptor?? [ 1998.816745][T17594] cp210x 6-1:0.0: cp210x converter detected [ 1999.044001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1999.257499][T13437] usbtouchscreen 10-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1999.273106][T13437] usb 10-1: USB disconnect, device number 103 [ 1999.461053][T17594] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 1999.468857][T17594] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 1999.478887][T17594] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1999.726336][T13437] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1999.841499][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.850482][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.887853][T13437] usb 10-1: Using ep0 maxpacket: 32 [ 1999.895162][T13437] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1999.903742][T13437] usb 10-1: config 0 has no interface number 0 [ 1999.910334][T13437] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1999.926342][T13437] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1999.936159][T13437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.944662][T13437] usb 10-1: Product: syz [ 1999.949365][T13437] usb 10-1: Manufacturer: syz [ 1999.954420][T13437] usb 10-1: SerialNumber: syz [ 1999.960229][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 1999.962588][T13437] usb 10-1: config 0 descriptor?? [ 1999.982078][T13437] smsc75xx v1.0.0 [ 2000.144226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2000.222856][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2000.641404][T13437] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2000.652849][T13437] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2000.663535][T13437] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2000.687249][T13437] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 2000.704186][T13437] usb 10-1: USB disconnect, device number 104 [ 2001.056680][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 2001.066860][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 2001.077849][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 2001.088897][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 2001.099194][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 2001.109211][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 2001.119634][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 2001.129449][T16080] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 2001.139109][T16080] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 2001.190949][T16082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2001.255546][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2001.501151][ T7025] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 2001.580731][T17594] usb 6-1: USB disconnect, device number 20 [ 2001.595814][T17594] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2001.611481][T17594] cp210x 6-1:0.0: device disconnected [ 2001.664670][ T7025] usb 10-1: too many configurations: 237, using maximum allowed: 8 [ 2001.681974][ T7025] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2001.691397][ T7025] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.699931][ T7025] usb 10-1: Product: syz [ 2001.704254][ T7025] usb 10-1: Manufacturer: syz [ 2001.708948][ T7025] usb 10-1: SerialNumber: syz [ 2001.721613][ T7025] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2001.795019][ T7022] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2001.950426][T17594] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2002.076886][ T30] audit: type=1326 audit(2160.461:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.099197][ T30] audit: type=1326 audit(2160.461:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.123385][ T30] audit: type=1326 audit(2160.461:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.148566][ T30] audit: type=1326 audit(2160.461:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.171939][ T30] audit: type=1326 audit(2160.461:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.195935][ T30] audit: type=1326 audit(2160.461:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.218779][T17594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2002.231644][T17594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.234553][T16091] overlayfs: failed to resolve './file1': -2 [ 2002.242879][T17594] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 2002.258468][ T30] audit: type=1326 audit(2160.461:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.288105][ T7011] usb 10-1: USB disconnect, device number 105 [ 2002.296140][T17594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.306325][ T30] audit: type=1326 audit(2160.461:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.315204][T17594] usb 6-1: config 0 descriptor?? [ 2002.333888][ T30] audit: type=1326 audit(2160.461:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.359270][ T30] audit: type=1326 audit(2160.461:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.7.11391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fbf8eec9 code=0x7ffc0000 [ 2002.382527][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2002.788285][T17594] aureal 0003:0755:2626.00A7: item fetching failed at offset 5/7 [ 2002.796903][T17594] aureal 0003:0755:2626.00A7: probe with driver aureal failed with error -22 [ 2002.881487][ T7022] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2002.888631][T16153] input: syz0 as /devices/virtual/input/input214 [ 2002.896150][ T7022] ath9k_htc: Failed to initialize the device [ 2002.903888][ T7011] usb 10-1: ath9k_htc: USB layer deinitialized [ 2003.008208][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.021987][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.036971][T32722] usb 6-1: USB disconnect, device number 21 [ 2003.479220][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2003.487595][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2003.511307][ T7011] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 2003.653638][ T7011] usb 10-1: device descriptor read/64, error -71 [ 2003.906901][ T7011] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 2004.045900][ T7011] usb 10-1: device descriptor read/64, error -71 [ 2004.163896][ T7011] usb usb10-port1: attempt power cycle [ 2004.323811][ T7022] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 2004.418838][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2004.497573][ T7022] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2004.509741][ T7022] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 2004.524586][ T7022] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.527140][ T7011] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 2004.540956][ T7022] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2004.561866][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2004.565622][ T7022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.581582][ T7022] usb 6-1: Product: syz [ 2004.585763][ T7022] usb 6-1: Manufacturer: syz [ 2004.590374][ T7022] usb 6-1: SerialNumber: syz [ 2004.595975][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2004.605625][ T7011] usb 10-1: device descriptor read/8, error -71 [ 2004.613594][ T7022] usb 6-1: config 0 descriptor?? [ 2004.837142][T32722] usb 6-1: USB disconnect, device number 22 [ 2004.858420][ T7011] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 2004.881019][ T7011] usb 10-1: device descriptor read/8, error -71 [ 2004.997843][ T7011] usb usb10-port1: unable to enumerate USB device [ 2005.413958][T16243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2005.703220][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2005.786513][T16261] netlink: 'syz.5.11409': attribute type 11 has an invalid length. [ 2006.502885][T16284] siw: device registration error -23 [ 2006.815859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2006.918915][T16299] FAULT_INJECTION: forcing a failure. [ 2006.918915][T16299] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.918947][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.5.11418 Not tainted syzkaller #0 PREEMPT(full) [ 2006.918967][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2006.918978][T16299] Call Trace: [ 2006.918986][T16299] [ 2006.918998][T16299] dump_stack_lvl+0x189/0x250 [ 2006.919028][T16299] ? __pfx____ratelimit+0x10/0x10 [ 2006.919056][T16299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2006.919083][T16299] ? __pfx__printk+0x10/0x10 [ 2006.919113][T16299] ? __pfx___might_resched+0x10/0x10 [ 2006.919134][T16299] ? fs_reclaim_acquire+0x7d/0x100 [ 2006.919157][T16299] should_fail_ex+0x414/0x560 [ 2006.919189][T16299] should_failslab+0xa8/0x100 [ 2006.919209][T16299] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2006.919234][T16299] ? shstk_validate_clone+0x1f2/0x4e0 [ 2006.919256][T16299] ? alloc_pid+0x9f/0xab0 [ 2006.919280][T16299] ? copy_thread+0x4a7/0x980 [ 2006.919304][T16299] alloc_pid+0x9f/0xab0 [ 2006.919338][T16299] copy_process+0x1b22/0x3c20 [ 2006.919376][T16299] ? copy_process+0x97f/0x3c20 [ 2006.919407][T16299] ? __pfx_copy_process+0x10/0x10 [ 2006.919441][T16299] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2006.919470][T16299] vhost_task_create+0x1ed/0x350 [ 2006.919515][T16299] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2006.919544][T16299] ? __pfx_vhost_task_create+0x10/0x10 [ 2006.919581][T16299] ? __pfx_vhost_task_fn+0x10/0x10 [ 2006.919627][T16299] kvm_mmu_post_init_vm+0x14c/0x300 [ 2006.919650][T16299] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 2006.919676][T16299] ? __mutex_trylock_common+0x153/0x260 [ 2006.919706][T16299] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2006.919733][T16299] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2006.919756][T16299] ? rcu_is_watching+0x15/0xb0 [ 2006.919781][T16299] ? trace_contention_end+0x39/0x120 [ 2006.919807][T16299] ? look_up_lock_class+0x74/0x170 [ 2006.919828][T16299] ? register_lock_class+0x51/0x320 [ 2006.919856][T16299] ? __lock_acquire+0xab9/0xd20 [ 2006.919912][T16299] kvm_vcpu_ioctl+0x95c/0xe90 [ 2006.919937][T16299] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2006.919978][T16299] ? __fget_files+0x2a/0x420 [ 2006.920005][T16299] ? __fget_files+0x3a0/0x420 [ 2006.920025][T16299] ? __fget_files+0x2a/0x420 [ 2006.920050][T16299] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2006.920072][T16299] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2006.920090][T16299] __se_sys_ioctl+0xfc/0x170 [ 2006.920122][T16299] do_syscall_64+0xfa/0xfa0 [ 2006.920140][T16299] ? lockdep_hardirqs_on+0x9c/0x150 [ 2006.920159][T16299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.920178][T16299] ? clear_bhb_loop+0x60/0xb0 [ 2006.920201][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.920219][T16299] RIP: 0033:0x7fb9bc58eec9 [ 2006.920236][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2006.920253][T16299] RSP: 002b:00007fb9bd3fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2006.920274][T16299] RAX: ffffffffffffffda RBX: 00007fb9bc7e5fa0 RCX: 00007fb9bc58eec9 [ 2006.920288][T16299] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2006.920300][T16299] RBP: 00007fb9bd3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2006.920312][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.920324][T16299] R13: 00007fb9bc7e6038 R14: 00007fb9bc7e5fa0 R15: 00007fffa5e7bc48 [ 2006.920356][T16299] [ 2007.360415][ T5914] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2007.522784][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2007.531906][ T5914] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 2007.540033][ T5914] usb 6-1: config 0 has no interface number 0 [ 2007.546323][ T5914] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2007.557277][ T5914] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2007.568223][ T5914] usb 6-1: config 0 interface 96 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2007.579071][ T5914] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2007.589049][ T5914] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2007.599953][ T5914] usb 6-1: config 0 interface 96 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2007.612866][ T5914] usb 6-1: New USB device found, idVendor=148f, idProduct=761a, bcdDevice=52.7e [ 2007.622002][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.630265][ T5914] usb 6-1: Product: syz [ 2007.634441][ T5914] usb 6-1: Manufacturer: syz [ 2007.639085][ T5914] usb 6-1: SerialNumber: syz [ 2007.645895][ T5914] usb 6-1: config 0 descriptor?? [ 2007.652650][T16306] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2007.842039][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2007.882942][ T7022] usb 6-1: USB disconnect, device number 23 [ 2007.927087][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2007.986606][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2009.039382][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2009.356633][T16344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1946294017 (31140704272 ns) > initial count (4518400576 ns). Using initial count to start timer. [ 2010.081458][T16360] FAULT_INJECTION: forcing a failure. [ 2010.081458][T16360] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.094804][T16360] CPU: 1 UID: 0 PID: 16360 Comm: syz.7.11427 Not tainted syzkaller #0 PREEMPT(full) [ 2010.094830][T16360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2010.094840][T16360] Call Trace: [ 2010.094846][T16360] [ 2010.094853][T16360] dump_stack_lvl+0x189/0x250 [ 2010.094878][T16360] ? __pfx____ratelimit+0x10/0x10 [ 2010.094908][T16360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2010.094929][T16360] ? __pfx__printk+0x10/0x10 [ 2010.094952][T16360] ? __pfx___might_resched+0x10/0x10 [ 2010.094973][T16360] should_fail_ex+0x414/0x560 [ 2010.094998][T16360] should_failslab+0xa8/0x100 [ 2010.095014][T16360] __kvmalloc_node_noprof+0x158/0x910 [ 2010.095028][T16360] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 2010.095053][T16360] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 2010.095080][T16360] mmu_topup_memory_caches+0x21/0x170 [ 2010.095102][T16360] kvm_mmu_load+0x9d/0x2300 [ 2010.095121][T16360] ? kvm_msr_allowed+0x9a/0x490 [ 2010.095133][T16360] ? kvm_msr_allowed+0x9a/0x490 [ 2010.095146][T16360] ? kvm_msr_allowed+0x9a/0x490 [ 2010.095159][T16360] ? kvm_msr_allowed+0x9a/0x490 [ 2010.095170][T16360] ? kvm_apic_has_interrupt+0x744/0x770 [ 2010.095192][T16360] vcpu_run+0x48a8/0x7040 [ 2010.095254][T16360] ? __pfx_vcpu_run+0x10/0x10 [ 2010.095272][T16360] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2010.095292][T16360] ? rcu_is_watching+0x15/0xb0 [ 2010.095313][T16360] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2010.095335][T16360] ? __mutex_trylock_common+0x153/0x260 [ 2010.095358][T16360] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2010.095372][T16360] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2010.095388][T16360] ? rcu_is_watching+0x15/0xb0 [ 2010.095406][T16360] ? trace_contention_end+0x39/0x120 [ 2010.095425][T16360] ? look_up_lock_class+0x74/0x170 [ 2010.095440][T16360] ? register_lock_class+0x51/0x320 [ 2010.095459][T16360] ? __lock_acquire+0xab9/0xd20 [ 2010.095494][T16360] kvm_vcpu_ioctl+0x95c/0xe90 [ 2010.095511][T16360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2010.095539][T16360] ? __fget_files+0x2a/0x420 [ 2010.095558][T16360] ? __fget_files+0x3a0/0x420 [ 2010.095573][T16360] ? __fget_files+0x2a/0x420 [ 2010.095590][T16360] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2010.095607][T16360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2010.095619][T16360] __se_sys_ioctl+0xfc/0x170 [ 2010.095642][T16360] do_syscall_64+0xfa/0xfa0 [ 2010.095655][T16360] ? lockdep_hardirqs_on+0x9c/0x150 [ 2010.095669][T16360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.095682][T16360] ? clear_bhb_loop+0x60/0xb0 [ 2010.095699][T16360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.095712][T16360] RIP: 0033:0x7f04fbf8eec9 [ 2010.095724][T16360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2010.095736][T16360] RSP: 002b:00007f04fce8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2010.095751][T16360] RAX: ffffffffffffffda RBX: 00007f04fc1e5fa0 RCX: 00007f04fbf8eec9 [ 2010.095761][T16360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2010.095769][T16360] RBP: 00007f04fce8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2010.095778][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.095786][T16360] R13: 00007f04fc1e6038 R14: 00007f04fc1e5fa0 R15: 00007ffe41632e38 [ 2010.095808][T16360] [ 2010.415994][ C1] vkms_vblank_simulate: vblank timer overrun [ 2010.422447][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2010.431593][ T7011] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 2010.589126][ T7011] usb 10-1: device descriptor read/64, error -71 [ 2010.867159][ T7011] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 2010.952679][ T7025] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2011.017358][ T7011] usb 10-1: device descriptor read/64, error -71 [ 2011.113015][ T7025] usb 6-1: Using ep0 maxpacket: 32 [ 2011.119614][ T7025] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 2011.128178][ T7025] usb 6-1: config 0 has no interface number 0 [ 2011.134450][ T7025] usb 6-1: config 0 interface 172 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2011.135596][ T7011] usb usb10-port1: attempt power cycle [ 2011.149532][ T7025] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2011.163762][ T7025] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2011.176317][ T7025] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2011.185930][ T7025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.194262][ T7025] usb 6-1: Product: syz [ 2011.198639][ T7025] usb 6-1: Manufacturer: syz [ 2011.203289][ T7025] usb 6-1: SerialNumber: syz [ 2011.215213][ T7025] usb 6-1: config 0 descriptor?? [ 2011.226762][ T7025] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2011.253263][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2011.442395][T16378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.451517][T16378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.519698][ T7011] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 2011.531151][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2011.552782][ T7011] usb 10-1: device descriptor read/8, error -71 [ 2011.808001][ T7011] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 2011.830467][ T7011] usb 10-1: device descriptor read/8, error -71 [ 2011.947508][ T7011] usb usb10-port1: unable to enumerate USB device [ 2012.105306][ T7025] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 2012.115988][ T7025] gspca_pac7302 6-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 2012.132412][ T7025] usb 6-1: USB disconnect, device number 24 [ 2012.631387][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2012.791021][T16415] lo: entered promiscuous mode [ 2013.037699][ T7011] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2013.201424][ T7011] usb 6-1: not running at top speed; connect to a high speed hub [ 2013.210328][ T7011] usb 6-1: config 3 has an invalid interface number: 5 but max is 0 [ 2013.218342][ T7011] usb 6-1: config 3 has no interface number 0 [ 2013.224508][ T7011] usb 6-1: config 3 interface 5 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 2013.235708][ T7011] usb 6-1: config 3 interface 5 has no altsetting 0 [ 2013.244391][ T7011] usb 6-1: New USB device found, idVendor=12d1, idProduct=6df1, bcdDevice=98.0b [ 2013.253544][ T7011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.261527][ T7011] usb 6-1: Product: syz [ 2013.265744][ T7011] usb 6-1: Manufacturer: syz [ 2013.270347][ T7011] usb 6-1: SerialNumber: syz [ 2013.486771][ T9888] Bluetooth: hci1: command 0x0405 tx timeout [ 2013.499570][T16414] lo: left promiscuous mode [ 2013.506082][ T7011] option 6-1:3.5: GSM modem (1-port) converter detected [ 2013.517265][ T7011] usb 6-1: USB disconnect, device number 25 [ 2013.524339][T32722] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 2013.537783][ T7011] option 6-1:3.5: device disconnected [ 2013.700440][T32722] usb 10-1: Using ep0 maxpacket: 16 [ 2013.707606][T32722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.718829][T32722] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2013.728020][T32722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.738993][T32722] usb 10-1: config 0 descriptor?? [ 2013.744478][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2014.112356][T16449] FAULT_INJECTION: forcing a failure. [ 2014.112356][T16449] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.125693][T16449] CPU: 0 UID: 0 PID: 16449 Comm: syz.7.11438 Not tainted syzkaller #0 PREEMPT(full) [ 2014.125719][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2014.125730][T16449] Call Trace: [ 2014.125739][T16449] [ 2014.125748][T16449] dump_stack_lvl+0x189/0x250 [ 2014.125781][T16449] ? __pfx____ratelimit+0x10/0x10 [ 2014.125815][T16449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2014.125844][T16449] ? __pfx__printk+0x10/0x10 [ 2014.125875][T16449] ? __pfx___might_resched+0x10/0x10 [ 2014.125905][T16449] should_fail_ex+0x414/0x560 [ 2014.125938][T16449] should_failslab+0xa8/0x100 [ 2014.125960][T16449] __kvmalloc_node_noprof+0x158/0x910 [ 2014.125997][T16449] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 2014.126035][T16449] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 2014.126076][T16449] mmu_topup_memory_caches+0x21/0x170 [ 2014.126109][T16449] kvm_mmu_load+0x9d/0x2300 [ 2014.126148][T16449] ? kvm_apic_has_interrupt+0x744/0x770 [ 2014.126181][T16449] vcpu_run+0x48a8/0x7040 [ 2014.126279][T16449] ? __pfx_vcpu_run+0x10/0x10 [ 2014.126315][T16449] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2014.126345][T16449] ? rcu_is_watching+0x15/0xb0 [ 2014.126375][T16449] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2014.126403][T16449] ? __mutex_trylock_common+0x153/0x260 [ 2014.126436][T16449] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2014.126459][T16449] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2014.126483][T16449] ? rcu_is_watching+0x15/0xb0 [ 2014.126509][T16449] ? trace_contention_end+0x39/0x120 [ 2014.126535][T16449] ? look_up_lock_class+0x74/0x170 [ 2014.126558][T16449] ? register_lock_class+0x51/0x320 [ 2014.126589][T16449] ? __lock_acquire+0xab9/0xd20 [ 2014.126643][T16449] kvm_vcpu_ioctl+0x95c/0xe90 [ 2014.126669][T16449] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2014.126713][T16449] ? __fget_files+0x2a/0x420 [ 2014.126743][T16449] ? __fget_files+0x3a0/0x420 [ 2014.126765][T16449] ? __fget_files+0x2a/0x420 [ 2014.126793][T16449] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2014.126816][T16449] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2014.126836][T16449] __se_sys_ioctl+0xfc/0x170 [ 2014.126870][T16449] do_syscall_64+0xfa/0xfa0 [ 2014.126889][T16449] ? lockdep_hardirqs_on+0x9c/0x150 [ 2014.126909][T16449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.126929][T16449] ? clear_bhb_loop+0x60/0xb0 [ 2014.126954][T16449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.126974][T16449] RIP: 0033:0x7f04fbf8eec9 [ 2014.126993][T16449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2014.127010][T16449] RSP: 002b:00007f04fce8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2014.127032][T16449] RAX: ffffffffffffffda RBX: 00007f04fc1e5fa0 RCX: 00007f04fbf8eec9 [ 2014.127048][T16449] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2014.127060][T16449] RBP: 00007f04fce8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2014.127073][T16449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2014.127085][T16449] R13: 00007f04fc1e6038 R14: 00007f04fc1e5fa0 R15: 00007ffe41632e38 [ 2014.127120][T16449] [ 2014.439716][T32722] mcp2221 0003:04D8:00DD.00A8: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 2014.516958][T16463] tmpfs: Bad value for 'mpol' [ 2014.522866][T16463] openvswitch: netlink: IP tunnel dst address not specified [ 2014.601989][T16463] lo speed is unknown, defaulting to 1000 [ 2014.785240][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2014.785270][T16425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2014.855609][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2014.879484][T16425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2014.911802][ T7011] usb 10-1: USB disconnect, device number 114 [ 2015.150704][T16531] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11445'. [ 2015.203279][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11445'. [ 2015.300056][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2015.839460][T16564] netlink: 'syz.5.11451': attribute type 58 has an invalid length. [ 2015.968179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2016.744212][T16572] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11454'. [ 2016.753891][T16571] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11454'. [ 2016.798601][T16574] netlink: 'syz.5.11455': attribute type 4 has an invalid length. [ 2016.806591][T16574] netlink: 17 bytes leftover after parsing attributes in process `syz.5.11455'. [ 2017.079074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2018.003997][T16633] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11468'. [ 2018.041288][T17594] usb 10-1: new full-speed USB device number 115 using dummy_hcd [ 2018.192409][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2018.215047][T17594] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2018.233736][T17594] usb 10-1: config 0 has no interface number 0 [ 2018.240175][T17594] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2018.253064][T17594] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2018.265644][T17594] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2018.300199][T16639] 9pnet_fd: Insufficient options for proto=fd [ 2018.311826][T17594] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2018.321489][T17594] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2018.329687][T17594] usb 10-1: Product: syz [ 2018.340630][T17594] usb 10-1: SerialNumber: syz [ 2018.348333][T17594] usb 10-1: config 0 descriptor?? [ 2018.366029][T17594] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 2018.369486][T16643] netlink: 'syz.5.11472': attribute type 10 has an invalid length. [ 2018.386191][T17594] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input218 [ 2018.393418][T16643] team0: Device tunl0 is of different type [ 2018.503311][T21016] udevd[21016]: symlink '../event4' '/dev/input/by-id/usb-0d8c_syz_syz-event-if08.tmp-c13:68' failed: Read-only file system [ 2018.552873][T21016] udevd[21016]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.9-usb-0:1:0.8-event.tmp-c13:68' failed: Read-only file system [ 2018.651719][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.659064][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.666597][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.673889][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.681169][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.688465][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.697073][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.704839][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.712100][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.719555][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2018.736374][ T7025] usb 10-1: USB disconnect, device number 115 [ 2018.742524][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2018.770251][T16621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2018.788518][ T7025] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2018.796415][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2019.017514][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2019.122802][T16705] securityfs: Unknown parameter 'ð!¤åŸÿŒN6 ¸»2PÞ°QEPÌFÓáyiâ$/ÌM' [ 2019.302954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2019.633118][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2019.721415][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2020.415763][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2020.477094][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2020.541840][T16749] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2020.559920][T16749] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 2020.583886][T16749] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2020.601823][T16749] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 2020.732719][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2020.806627][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2021.147122][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2021.176334][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11500'. [ 2021.427874][T16789] FAULT_INJECTION: forcing a failure. [ 2021.427874][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.462367][T16789] CPU: 0 UID: 0 PID: 16789 Comm: syz.0.11502 Not tainted syzkaller #0 PREEMPT(full) [ 2021.462396][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2021.462409][T16789] Call Trace: [ 2021.462417][T16789] [ 2021.462426][T16789] dump_stack_lvl+0x189/0x250 [ 2021.462462][T16789] ? __pfx____ratelimit+0x10/0x10 [ 2021.462494][T16789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2021.462530][T16789] ? __pfx__printk+0x10/0x10 [ 2021.462563][T16789] ? __pfx___might_resched+0x10/0x10 [ 2021.462587][T16789] ? fs_reclaim_acquire+0x7d/0x100 [ 2021.462612][T16789] should_fail_ex+0x414/0x560 [ 2021.462648][T16789] should_failslab+0xa8/0x100 [ 2021.462672][T16789] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2021.462702][T16789] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2021.462737][T16789] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2021.462778][T16789] mmu_topup_memory_caches+0x21/0x170 [ 2021.462811][T16789] kvm_mmu_load+0x9d/0x2300 [ 2021.462839][T16789] ? kvm_msr_allowed+0x9a/0x490 [ 2021.462869][T16789] ? kvm_msr_allowed+0x9a/0x490 [ 2021.462888][T16789] ? kvm_msr_allowed+0x9a/0x490 [ 2021.462907][T16789] ? kvm_msr_allowed+0x9a/0x490 [ 2021.462923][T16789] ? kvm_apic_has_interrupt+0x744/0x770 [ 2021.462955][T16789] vcpu_run+0x48a8/0x7040 [ 2021.463051][T16789] ? __pfx_vcpu_run+0x10/0x10 [ 2021.463078][T16789] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2021.463107][T16789] ? rcu_is_watching+0x15/0xb0 [ 2021.463137][T16789] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2021.463163][T16789] ? __mutex_trylock_common+0x153/0x260 [ 2021.463194][T16789] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2021.463215][T16789] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2021.463238][T16789] ? rcu_is_watching+0x15/0xb0 [ 2021.463262][T16789] ? trace_contention_end+0x39/0x120 [ 2021.463289][T16789] ? look_up_lock_class+0x74/0x170 [ 2021.463311][T16789] ? register_lock_class+0x51/0x320 [ 2021.463338][T16789] ? __lock_acquire+0xab9/0xd20 [ 2021.463389][T16789] kvm_vcpu_ioctl+0x95c/0xe90 [ 2021.463414][T16789] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2021.463453][T16789] ? __fget_files+0x2a/0x420 [ 2021.463481][T16789] ? __fget_files+0x3a0/0x420 [ 2021.463502][T16789] ? __fget_files+0x2a/0x420 [ 2021.463528][T16789] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2021.463551][T16789] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2021.463569][T16789] __se_sys_ioctl+0xfc/0x170 [ 2021.463601][T16789] do_syscall_64+0xfa/0xfa0 [ 2021.463620][T16789] ? lockdep_hardirqs_on+0x9c/0x150 [ 2021.463639][T16789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.463658][T16789] ? clear_bhb_loop+0x60/0xb0 [ 2021.463681][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.463700][T16789] RIP: 0033:0x7faa4878eec9 [ 2021.463717][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2021.463733][T16789] RSP: 002b:00007faa495b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2021.463754][T16789] RAX: ffffffffffffffda RBX: 00007faa489e5fa0 RCX: 00007faa4878eec9 [ 2021.463769][T16789] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2021.463781][T16789] RBP: 00007faa495b0090 R08: 0000000000000000 R09: 0000000000000000 [ 2021.463793][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.463804][T16789] R13: 00007faa489e6038 R14: 00007faa489e5fa0 R15: 00007ffdfbd7d658 [ 2021.463836][T16789] [ 2021.526884][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2021.528844][ C0] vkms_vblank_simulate: vblank timer overrun [ 2021.801197][ C0] vkms_vblank_simulate: vblank timer overrun [ 2022.302335][T16836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2022.459763][T16874] netlink: 'syz.9.11509': attribute type 46 has an invalid length. [ 2022.639642][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2022.724503][T32722] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 2022.908139][T32722] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2022.924905][T32722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.935218][T16972] netlink: 160 bytes leftover after parsing attributes in process `syz.5.11517'. [ 2022.938966][T32722] usb 10-1: config 0 descriptor?? [ 2022.958275][T32722] cp210x 10-1:0.0: cp210x converter detected [ 2023.048586][T16976] 9pnet_fd: Insufficient options for proto=fd [ 2023.058746][T16976] overlayfs: failed to clone upperpath [ 2023.170315][T32722] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2023.174684][T16874] netlink: 'syz.9.11509': attribute type 10 has an invalid length. [ 2023.178413][T32722] cp210x 10-1:0.0: querying part number failed [ 2023.186048][T16874] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11509'. [ 2023.196380][T32722] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2023.221614][ T7025] usb 10-1: USB disconnect, device number 116 [ 2023.235105][ T7025] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2023.252076][ T7025] cp210x 10-1:0.0: device disconnected [ 2023.761529][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2023.840000][T17017] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 2024.658945][T17075] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11534'. [ 2024.874195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2025.120042][ T7025] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 2025.301053][ T7025] usb 10-1: Using ep0 maxpacket: 32 [ 2025.308873][ T7025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2025.319554][ T7025] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2025.329803][ T7025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2025.339216][ T7025] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2025.348921][ T7025] usb 10-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 2025.357540][ T7025] usb 10-1: Product: syz [ 2025.361910][ T7025] usb 10-1: Manufacturer: syz [ 2025.367023][ T7025] usb 10-1: SerialNumber: syz [ 2025.375639][ T7025] usb 10-1: config 0 descriptor?? [ 2025.821893][T17085] netlink: 'syz.9.11537': attribute type 27 has an invalid length. [ 2025.831488][ T7025] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 2025.839184][ T7025] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 2025.974675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2026.398637][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2026.446955][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2027.087601][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2027.134067][T17123] lo speed is unknown, defaulting to 1000 [ 2028.080394][T32722] usb 10-1: USB disconnect, device number 117 [ 2028.198495][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2028.808608][ T7022] usb 10-1: new low-speed USB device number 118 using dummy_hcd [ 2028.862324][T17222] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11563'. [ 2028.981222][ T7022] usb 10-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 2028.992537][ T7022] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2029.003178][ T7022] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 2029.013208][ T7022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.033391][ T7022] usb 10-1: config 0 descriptor?? [ 2029.273309][ T7022] usb 10-1: USB disconnect, device number 118 [ 2029.310915][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2029.480459][T17233] overlayfs: failed to clone upperpath [ 2029.696511][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2029.741857][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2029.750521][T17244] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11567'. [ 2029.813478][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2030.086879][T17268] sctp: [Deprecated]: syz.5.11571 (pid 17268) Use of int in maxseg socket option. [ 2030.086879][T17268] Use struct sctp_assoc_value instead [ 2030.225274][T17274] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11573'. [ 2030.422362][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2030.744039][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2030.870580][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2031.534920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2031.597963][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2031.653520][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2031.786746][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2031.790795][T17312] sctp: [Deprecated]: syz.5.11582 (pid 17312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2031.790795][T17312] Use struct sctp_sack_info instead [ 2031.928427][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.935323][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.943474][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.949865][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.956699][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.963286][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.970058][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.977433][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.984456][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.990913][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2031.997562][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.003948][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.010577][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.017283][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.023729][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.030317][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.036936][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.043526][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.050378][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.056725][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.063281][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.069699][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.076038][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.082604][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.088990][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.095484][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.103260][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.109750][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.116267][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.122867][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.129285][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.135818][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.142248][T17322] 9pnet_fd: Insufficient options for proto=fd [ 2032.185794][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 2032.185810][ T30] audit: type=1326 audit(2188.623:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17323 comm="syz.5.11585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9bc58eec9 code=0x0 [ 2032.538566][T17335] nfs: Unknown parameter 'defcontext' [ 2032.600873][T17339] sctp: [Deprecated]: syz.9.11588 (pid 17339) Use of int in max_burst socket option deprecated. [ 2032.600873][T17339] Use struct sctp_assoc_value instead [ 2032.646235][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2033.758757][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2034.531358][T17349] ALSA: mixer_oss: invalid OSS volume '' [ 2034.870151][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2035.099908][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2035.290470][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2035.354769][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2035.511830][ T7022] usb 10-1: new full-speed USB device number 119 using dummy_hcd [ 2035.686062][ T7022] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2035.697031][ T7022] usb 10-1: config 0 has no interfaces? [ 2035.702720][ T7022] usb 10-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 2035.712863][ T7022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.729165][ T7022] usb 10-1: config 0 descriptor?? [ 2035.983140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2036.356000][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2036.535248][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2036.552229][T17435] delete_channel: no stack [ 2036.659011][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2037.093995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2037.592423][T17457] netlink: 59 bytes leftover after parsing attributes in process `syz.7.11616'. [ 2038.217466][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2038.491688][ T7011] usb 10-1: USB disconnect, device number 119 [ 2038.990672][T17524] overlayfs: failed to resolve './file1': -2 [ 2039.025176][T17523] overlayfs: failed to clone upperpath [ 2039.071674][ T9888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2039.087252][ T9888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2039.096931][ T9888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2039.106518][ T9888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2039.115660][ T9888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2039.193900][T17527] lo speed is unknown, defaulting to 1000 [ 2039.317911][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2039.433455][T17527] chnl_net:caif_netlink_parms(): no params data found [ 2039.574572][T17527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.581814][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.589122][T17527] bridge_slave_0: entered allmulticast mode [ 2039.598555][T17527] bridge_slave_0: entered promiscuous mode [ 2039.607625][T17527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.614835][T17527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.624725][T17527] bridge_slave_1: entered allmulticast mode [ 2039.633448][T17527] bridge_slave_1: entered promiscuous mode [ 2039.686853][T17527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2039.719715][T17527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2039.824352][T17527] team0: Port device team_slave_0 added [ 2039.851851][T17746] overlay: Unknown parameter 'euid<00000000000000000000' [ 2039.903231][T17527] team0: Port device team_slave_1 added [ 2039.940227][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2040.043865][T17527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2040.054617][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2040.096929][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2040.108760][T17527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2040.134200][T17527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2040.142678][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2040.171656][T17527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2040.291317][T17527] hsr_slave_0: entered promiscuous mode [ 2040.306037][T17527] hsr_slave_1: entered promiscuous mode [ 2040.316235][T17527] debugfs: 'hsr0' already exists in 'hsr' [ 2040.322063][T17527] Cannot create hsr debugfs directory [ 2040.400260][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2040.441648][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2040.508270][ T30] audit: type=1800 audit(2196.414:3538): pid=17873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11644" name="nullb0" dev="tmpfs" ino=746 res=0 errno=0 [ 2040.641212][T17527] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.746437][T17527] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.823110][T17527] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.895484][T17527] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.037596][T17527] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2041.055447][T17527] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2041.068362][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2041.075915][T17527] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2041.099498][T17527] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2041.217227][T17527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2041.249786][T17527] 8021q: adding VLAN 0 to HW filter on device team0 [ 2041.268838][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.276100][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2041.289001][ T9888] Bluetooth: hci3: command tx timeout [ 2041.308400][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.315598][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2041.321909][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2041.348292][T17937] netlink: 'syz.0.11647': attribute type 21 has an invalid length. [ 2041.432884][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2041.541882][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2041.593785][T17527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2041.804788][T17527] veth0_vlan: entered promiscuous mode [ 2041.822596][T17527] veth1_vlan: entered promiscuous mode [ 2041.866477][T17527] veth0_macvtap: entered promiscuous mode [ 2041.880328][T17527] veth1_macvtap: entered promiscuous mode [ 2041.919552][T17527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2041.944324][T17527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2041.967075][ T3597] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.984601][ T3597] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.998419][ T3597] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.008208][ T3597] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.139800][ T7492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2042.160156][ T7492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2042.192312][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2042.200674][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2042.252510][T18000] netlink: 'syz.9.11631': attribute type 1 has an invalid length. [ 2042.262044][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11631'. [ 2042.654680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2042.718097][ T7011] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 2042.882806][ T7011] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2042.898512][ T7011] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2042.909968][ T7011] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2042.927183][ T7011] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2042.940359][ T7011] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2042.950061][ T7011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.960736][ T7011] usb 10-1: config 0 descriptor?? [ 2043.041199][T18046] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 2043.047768][T18046] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2043.058100][T18046] vhci_hcd vhci_hcd.0: Device attached [ 2043.243563][T13437] vhci_hcd: vhci_device speed not set [ 2043.306449][T13437] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 2043.405486][T18012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.414352][T18012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.427604][ T7011] plantronics 0003:047F:FFFF.00A9: ignoring exceeding usage max [ 2043.446616][ T7011] plantronics 0003:047F:FFFF.00A9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2043.509482][ T9888] Bluetooth: hci3: command tx timeout [ 2043.644936][ T7022] usb 10-1: USB disconnect, device number 120 [ 2043.776363][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2043.914640][T18077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11663'. [ 2044.514072][ T7022] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 2044.697526][ T7022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2044.716526][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2044.731866][ T7022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2044.743514][ T7022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2044.754740][ T7022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2044.766733][ T7022] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2044.776024][ T7022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.784532][ T7022] usb 10-1: Product: syz [ 2044.788791][ T7022] usb 10-1: Manufacturer: syz [ 2044.793611][ T7022] usb 10-1: SerialNumber: syz [ 2044.800643][ T7022] usb 10-1: config 0 descriptor?? [ 2044.889154][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2045.027385][T18094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.036335][T18094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.058330][ T7022] adutux 10-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 2045.071713][ T7022] usb 10-1: USB disconnect, device number 121 [ 2045.666540][ T7022] IPVS: starting estimator thread 0... [ 2045.746328][ T9888] Bluetooth: hci3: command tx timeout [ 2045.775697][T18143] IPVS: using max 43 ests per chain, 103200 per kthread [ 2045.989538][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2046.256797][ T24] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 2046.272904][T18047] vhci_hcd: connection reset by peer [ 2046.281732][ T36] vhci_hcd: stop threads [ 2046.286012][ T36] vhci_hcd: release socket [ 2046.291197][ T36] vhci_hcd: disconnect device [ 2046.438564][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 2046.445233][ T24] usb 10-1: config 0 has an invalid interface number: 148 but max is 0 [ 2046.453599][ T24] usb 10-1: config 0 has no interface number 0 [ 2046.459922][ T24] usb 10-1: config 0 interface 148 has no altsetting 0 [ 2046.469783][ T24] usb 10-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 2046.479708][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.488234][ T24] usb 10-1: Product: syz [ 2046.492613][ T24] usb 10-1: Manufacturer: syz [ 2046.497303][ T24] usb 10-1: SerialNumber: syz [ 2046.505290][ T24] usb 10-1: config 0 descriptor?? [ 2046.735602][T18179] netlink: 188 bytes leftover after parsing attributes in process `syz.5.11685'. [ 2047.102292][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2047.461621][T18186] tmpfs: Bad value for 'mpol' [ 2047.619827][ T24] snd-usb-audio 10-1:0.148: probe with driver snd-usb-audio failed with error -110 [ 2047.958208][ T9888] Bluetooth: hci3: command tx timeout [ 2047.991008][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2048.213461][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2048.801759][T13437] vhci_hcd: vhci_device speed not set [ 2048.895121][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2048.937804][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2049.049349][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2049.106248][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2049.192644][ T24] usb 10-1: USB disconnect, device number 122 [ 2049.220693][T18230] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11695'. [ 2049.235021][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2049.326257][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2049.473476][T18244] netlink: 'syz.9.11699': attribute type 46 has an invalid length. [ 2049.481688][T18244] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11699'. [ 2050.437317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2050.851390][T18305] overlayfs: failed to clone upperpath [ 2050.858036][T18304] overlayfs: failed to clone upperpath [ 2051.003941][ T7022] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 2051.023885][ T30] audit: type=1326 audit(2206.244:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.5.11717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9bc58eec9 code=0x0 [ 2051.164767][ T7022] usb 10-1: Using ep0 maxpacket: 32 [ 2051.176040][ T7022] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 2051.197901][ T7022] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2051.207203][ T7022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.215302][ T7022] usb 10-1: Product: syz [ 2051.219785][ T7022] usb 10-1: Manufacturer: syz [ 2051.224503][ T7022] usb 10-1: SerialNumber: syz [ 2051.240394][ T7022] usb 10-1: config 0 descriptor?? [ 2051.247132][T18298] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2051.262038][ T7022] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input220 [ 2051.392224][T21306] udevd[21306]: symlink '../event4' '/dev/input/by-id/usb-syz_syz_syz-event-if00.tmp-c13:68' failed: Read-only file system [ 2051.408879][T21306] udevd[21306]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.9-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 2051.499700][ T7013] usb 10-1: USB disconnect, device number 123 [ 2051.499863][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2051.550074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2051.988198][ T7013] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 2052.160750][ T7013] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2052.169015][ T7013] usb 10-1: config 0 has no interface number 0 [ 2052.177621][ T7013] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2052.186957][ T7013] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.195240][ T7013] usb 10-1: Product: syz [ 2052.199522][ T7013] usb 10-1: Manufacturer: syz [ 2052.204337][ T7013] usb 10-1: SerialNumber: syz [ 2052.212277][ T7013] usb 10-1: config 0 descriptor?? [ 2052.436048][ T7013] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2052.464478][ T7013] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2052.479116][ T7013] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2052.488380][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2052.497421][ T7013] usb 10-1: media controller created [ 2052.527878][ T7013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2052.661269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2052.908441][ T7025] usb 10-1: USB disconnect, device number 124 [ 2053.191876][T18400] input: syz0 as /devices/virtual/input/input221 [ 2053.634146][ T7025] usb 10-1: new full-speed USB device number 125 using dummy_hcd [ 2053.774895][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2053.783748][ T7025] usb 10-1: device descriptor read/64, error -71 [ 2054.061801][ T7025] usb 10-1: new full-speed USB device number 126 using dummy_hcd [ 2054.212334][ T7025] usb 10-1: device descriptor read/64, error -71 [ 2054.340436][ T7025] usb usb10-port1: attempt power cycle [ 2054.714108][ T7025] usb 10-1: new full-speed USB device number 127 using dummy_hcd [ 2054.737076][ T7025] usb 10-1: device descriptor read/8, error -71 [ 2054.895765][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2055.003489][ T7025] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 2055.012088][T18421] fuse: Bad value for 'fd' [ 2055.036313][ T7025] usb 10-1: device descriptor read/8, error -71 [ 2055.104580][T18424] overlayfs: failed to clone upperpath [ 2055.153251][ T7025] usb usb10-port1: unable to enumerate USB device [ 2055.747596][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2055.906442][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2055.976748][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2056.008625][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2056.161048][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2056.542008][T23702] udevd[23702]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2056.696601][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2056.717804][T18530] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11752'. [ 2057.108955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2058.082776][ T7013] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2058.221478][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2058.255331][ T7013] usb 10-1: config 0 has an invalid interface number: 16 but max is 0 [ 2058.263709][ T7013] usb 10-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config [ 2058.274054][ T7013] usb 10-1: config 0 has no interface number 0 [ 2058.280345][ T7013] usb 10-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2058.296900][ T7013] usb 10-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 2058.306393][ T7013] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.314488][ T7013] usb 10-1: Product: syz [ 2058.319390][ T7013] usb 10-1: Manufacturer: syz [ 2058.324095][ T7013] usb 10-1: SerialNumber: syz [ 2058.331298][ T7013] usb 10-1: config 0 descriptor?? [ 2058.558298][T18549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2059.332830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2059.981035][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2060.074595][T21306] udevd[21306]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2060.173673][T18615] tmpfs: Unknown parameter 'ùota' [ 2060.456126][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2060.782975][T18617] netlink: 'syz.5.11773': attribute type 12 has an invalid length. [ 2060.897827][ T7013] pl2303 10-1:0.16: required endpoints missing [ 2060.923081][ T7013] usb 10-1: USB disconnect, device number 3 [ 2061.059404][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2061.135106][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2061.253267][T18653] netlink: 'syz.9.11779': attribute type 1 has an invalid length. [ 2061.556722][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2061.722998][T18679] openvswitch: netlink: Key type 64 is out of range max 32 [ 2062.125137][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2062.298640][ T24] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 2062.307953][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.316893][ T24] usb 10-1: Product: syz [ 2062.321171][ T24] usb 10-1: Manufacturer: syz [ 2062.325931][ T24] usb 10-1: SerialNumber: syz [ 2062.333797][ T24] usb 10-1: config 0 descriptor?? [ 2062.343169][ T24] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 2062.351721][ T24] usb 10-1: Detected FT4232HP [ 2062.616275][T18707] netlink: 703 bytes leftover after parsing attributes in process `syz.9.11788'. [ 2062.669727][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2062.858997][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11792'. [ 2062.987434][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2063.002154][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2063.003397][T18766] lo speed is unknown, defaulting to 1000 [ 2063.034403][ T24] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2063.071214][ T24] usb 10-1: USB disconnect, device number 4 [ 2063.110007][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2063.141503][ T24] ftdi_sio 10-1:0.0: device disconnected [ 2063.780604][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2064.051038][T18923] tipc: Enabling of bearer rejected, media not registered [ 2064.359790][T18932] overlayfs: failed to clone upperpath [ 2064.437654][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2064.549275][T18943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2064.590171][T18950] netlink: 248 bytes leftover after parsing attributes in process `syz.9.11807'. [ 2064.799385][T18971] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.11812'. [ 2064.878592][T18975] Invalid source name [ 2064.883458][T18975] UBIFS error (pid: 18975): cannot open "./file0", error -22 [ 2064.893564][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2065.142700][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2065.321853][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 2065.329865][ T24] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 2065.339672][ T24] usb 10-1: config 0 has no interface number 0 [ 2065.349368][ T24] usb 10-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 2065.362735][ T24] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2065.373456][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.382257][ T24] usb 10-1: Product: syz [ 2065.387535][ T24] usb 10-1: Manufacturer: syz [ 2065.392311][ T24] usb 10-1: SerialNumber: syz [ 2065.402339][ T24] usb 10-1: config 0 descriptor?? [ 2065.422305][ T24] smsc95xx v2.0.0 [ 2065.437148][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2065.448683][ T24] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 2065.656054][T18975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.670727][T18975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2065.701500][T18975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.714436][T18975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2065.749177][ T7011] usb 10-1: USB disconnect, device number 5 [ 2065.932260][T19036] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 2066.004478][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2066.132434][T19050] netlink: 'syz.5.11821': attribute type 10 has an invalid length. [ 2066.806370][ T7011] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 2066.945429][ T7011] usb 10-1: device descriptor read/64, error -71 [ 2067.127617][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2067.202294][ T7011] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 2067.340980][ T7011] usb 10-1: device descriptor read/64, error -71 [ 2067.460339][ T7011] usb usb10-port1: attempt power cycle [ 2067.719260][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2067.741353][T19081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2067.799158][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2067.799600][T19087] afs: Unknown parameter 'dynv/dsp' [ 2067.823588][ T7011] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 2067.874085][ T7011] usb 10-1: device descriptor read/8, error -71 [ 2067.891013][T21016] udevd[21016]: symlink '../../loop0' '/dev/disk/by-diskseq/687.tmp-b7:0' failed: Read-only file system [ 2067.951432][T19095] input: syz1 as /devices/virtual/input/input222 [ 2067.980674][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11832'. [ 2068.024857][T31556] overlayfs: failed lookup in lower (newroot/429, name='bus', err=-40): overlapping layers [ 2068.038539][T31556] overlayfs: failed lookup in lower (newroot/429, name='bus', err=-40): overlapping layers [ 2068.132099][ T7011] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 2068.178078][ T7011] usb 10-1: device descriptor read/8, error -71 [ 2068.239033][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2068.294242][ T7011] usb usb10-port1: unable to enumerate USB device [ 2068.456361][ T3597] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.515907][ T3597] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.601970][ T3597] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.684350][ T3597] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.818802][T21544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2068.830908][T21544] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2068.836937][T19120] @: renamed from vlan0 (while UP) [ 2068.847827][T21544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2068.861180][T21544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2068.872934][T21544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2069.000249][T19115] lo speed is unknown, defaulting to 1000 [ 2069.013948][ T3597] bridge_slave_1: left allmulticast mode [ 2069.020608][ T3597] bridge_slave_1: left promiscuous mode [ 2069.026401][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.037576][ T3597] bridge_slave_0: left allmulticast mode [ 2069.045317][ T3597] bridge_slave_0: left promiscuous mode [ 2069.051181][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.345062][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2069.509983][ T3597] dvmrp0 (unregistering): left allmulticast mode [ 2069.513762][T19162] FAULT_INJECTION: forcing a failure. [ 2069.513762][T19162] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.538281][T19162] CPU: 1 UID: 0 PID: 19162 Comm: syz.7.11842 Not tainted syzkaller #0 PREEMPT(full) [ 2069.538310][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2069.538324][T19162] Call Trace: [ 2069.538333][T19162] [ 2069.538342][T19162] dump_stack_lvl+0x189/0x250 [ 2069.538379][T19162] ? __pfx____ratelimit+0x10/0x10 [ 2069.538410][T19162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2069.538441][T19162] ? __pfx__printk+0x10/0x10 [ 2069.538475][T19162] ? __pfx___might_resched+0x10/0x10 [ 2069.538500][T19162] ? fs_reclaim_acquire+0x7d/0x100 [ 2069.538527][T19162] should_fail_ex+0x414/0x560 [ 2069.538563][T19162] should_failslab+0xa8/0x100 [ 2069.538587][T19162] __kmalloc_noprof+0xcb/0x7f0 [ 2069.538627][T19162] ? tomoyo_encode+0x28b/0x550 [ 2069.538658][T19162] tomoyo_encode+0x28b/0x550 [ 2069.538688][T19162] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2069.538713][T19162] ? tomoyo_domain+0xd9/0x130 [ 2069.538741][T19162] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2069.538772][T19162] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2069.538804][T19162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2069.538869][T19162] ? __fget_files+0x2a/0x420 [ 2069.538896][T19162] ? __fget_files+0x3a0/0x420 [ 2069.538918][T19162] ? __fget_files+0x2a/0x420 [ 2069.538945][T19162] security_file_ioctl+0xcb/0x2d0 [ 2069.538979][T19162] __se_sys_ioctl+0x47/0x170 [ 2069.539012][T19162] do_syscall_64+0xfa/0xfa0 [ 2069.539042][T19162] ? lockdep_hardirqs_on+0x9c/0x150 [ 2069.539062][T19162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.539082][T19162] ? clear_bhb_loop+0x60/0xb0 [ 2069.539107][T19162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.539126][T19162] RIP: 0033:0x7f04fbf8eec9 [ 2069.539145][T19162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2069.539162][T19162] RSP: 002b:00007f04fce8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.539183][T19162] RAX: ffffffffffffffda RBX: 00007f04fc1e5fa0 RCX: 00007f04fbf8eec9 [ 2069.539198][T19162] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2069.539211][T19162] RBP: 00007f04fce8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2069.539224][T19162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2069.539236][T19162] R13: 00007f04fc1e6038 R14: 00007f04fc1e5fa0 R15: 00007ffe41632e38 [ 2069.539270][T19162] [ 2069.539292][T19162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2069.903184][T19181] netlink: 'syz.5.11844': attribute type 15 has an invalid length. [ 2070.072431][ T3597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2070.084030][ T3597] bond_slave_0: left allmulticast mode [ 2070.093611][ T3597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.106769][ T3597] bond_slave_1: left allmulticast mode [ 2070.114762][ T3597] bond0 (unregistering): Released all slaves [ 2070.251528][ T7025] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 2070.254826][ T3597] tipc: Disabling bearer [ 2070.265444][ T3597] tipc: Disabling bearer [ 2070.272401][ T3597] tipc: Left network mode [ 2070.434212][ T7025] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.458365][ T7025] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2070.467547][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2070.477147][ T7025] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2070.488788][ T7025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2070.513416][ T7025] usb 10-1: SerialNumber: syz [ 2070.564091][ T7025] usb 10-1: 0:2 : does not exist [ 2070.889720][T19115] chnl_net:caif_netlink_parms(): no params data found [ 2071.025234][ T7025] usb 10-1: USB disconnect, device number 10 [ 2071.053464][ T9888] Bluetooth: hci0: command tx timeout [ 2071.075650][T21016] udevd[21016]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2071.080860][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2071.126530][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.136326][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2071.144747][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.173569][ T3597] veth1_macvtap: left promiscuous mode [ 2071.180464][ T3597] veth0_macvtap: left promiscuous mode [ 2071.186229][ T3597] veth1_vlan: left promiscuous mode [ 2071.193053][ T3597] veth0_vlan: left promiscuous mode [ 2071.576044][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2071.775725][ T3597] team0 (unregistering): Port device team_slave_1 removed [ 2071.817794][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11851'. [ 2071.830601][ T3597] team0 (unregistering): Port device team_slave_0 removed [ 2072.484204][T19115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.491887][T19115] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.499639][T19115] bridge_slave_0: entered allmulticast mode [ 2072.509579][T19115] bridge_slave_0: entered promiscuous mode [ 2072.543228][T19115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.554292][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.561741][T19115] bridge_slave_1: entered allmulticast mode [ 2072.571736][T19115] bridge_slave_1: entered promiscuous mode [ 2072.676109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2072.727447][T19115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2072.763887][T19115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2072.787848][T19436] batadv_slave_1: entered promiscuous mode [ 2072.817004][T19436] batadv_slave_1: left promiscuous mode [ 2072.828220][T19436] netlink: 'syz.9.11854': attribute type 23 has an invalid length. [ 2072.882598][T19115] team0: Port device team_slave_0 added [ 2072.895171][T19115] team0: Port device team_slave_1 added [ 2072.958388][T19115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2072.966600][T19115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2073.002185][T19115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2073.016146][T19115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2073.024424][T19115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2073.051712][T19115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2073.125142][ T7013] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2073.155877][T19115] hsr_slave_0: entered promiscuous mode [ 2073.163009][T19115] hsr_slave_1: entered promiscuous mode [ 2073.170090][T19115] debugfs: 'hsr0' already exists in 'hsr' [ 2073.175846][T19115] Cannot create hsr debugfs directory [ 2073.274850][ T9888] Bluetooth: hci0: command tx timeout [ 2073.289754][ T7013] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.303025][ T7013] usb 10-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 2073.321270][ T7013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.366975][ T7013] usb 10-1: config 0 descriptor?? [ 2073.788473][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2074.032075][ T7013] usbhid 10-1:0.0: can't add hid device: -71 [ 2074.061736][ T7013] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2074.091976][ T7013] usb 10-1: USB disconnect, device number 11 [ 2074.189752][T19115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2074.253740][T19115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2074.273993][T19115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2074.292091][T19115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2074.428865][T19115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2074.459847][T19115] 8021q: adding VLAN 0 to HW filter on device team0 [ 2074.479699][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2074.486958][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2074.519872][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2074.527100][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2074.774482][T19680] overlayfs: failed to clone upperpath [ 2074.900008][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2074.989689][T19115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2075.274255][ T7022] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2075.334366][T19115] veth0_vlan: entered promiscuous mode [ 2075.351708][T19115] veth1_vlan: entered promiscuous mode [ 2075.404804][T19115] veth0_macvtap: entered promiscuous mode [ 2075.423462][T19115] veth1_macvtap: entered promiscuous mode [ 2075.445714][ T7022] usb 10-1: Using ep0 maxpacket: 8 [ 2075.451566][T19115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2075.466171][ T7022] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2075.471210][T19115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2075.487860][ T7022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.500538][ T3597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.500704][ T3597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.501435][ T3597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.510562][ T9888] Bluetooth: hci0: command tx timeout [ 2075.535301][ T7022] usb 10-1: Product: syz [ 2075.539580][ T7022] usb 10-1: Manufacturer: syz [ 2075.542561][ T3597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.553034][ T7022] usb 10-1: SerialNumber: syz [ 2075.556957][ T7022] usb 10-1: config 0 descriptor?? [ 2075.686083][ T7492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.706097][ T7492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.752094][ T7492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.770404][ T7492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.807651][T19691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.821383][T19691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.867618][ T7022] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2075.909527][T32722] libceph: connect (1)[c::]:6789 error -101 [ 2075.916035][T32722] libceph: mon0 (1)[c::]:6789 connect error [ 2075.955099][T19732] ceph: No mds server is up or the cluster is laggy [ 2076.017130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2076.226083][ T983] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 2076.364972][ T983] usb 5-1: device descriptor read/64, error -71 [ 2076.514867][ T7022] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2076.528203][ T7022] usb 10-1: USB disconnect, device number 12 [ 2076.621635][ T983] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 2076.760342][ T983] usb 5-1: device descriptor read/64, error -71 [ 2076.892417][ T983] usb usb5-port1: attempt power cycle [ 2077.123899][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2077.252460][ T983] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 2077.280697][ T983] usb 5-1: device descriptor read/8, error -71 [ 2077.540844][ T983] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 2077.563197][ T983] usb 5-1: device descriptor read/8, error -71 [ 2077.680220][ T983] usb usb5-port1: unable to enumerate USB device [ 2077.722940][T21544] Bluetooth: hci0: command tx timeout [ 2078.236261][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2079.262246][T21544] Bluetooth: hci2: command 0x0406 tx timeout [ 2079.347801][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2080.460377][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2081.571670][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2082.502978][ T5233] udevd[5233]: worker [20018] /devices/virtual/block/nbd2 timeout; kill it [ 2082.515041][ T5233] udevd[5233]: seq 62873 '/devices/virtual/block/nbd2' killed [ 2082.694505][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2083.795593][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2084.918446][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2086.030112][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2087.131742][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2088.243591][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2089.356109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2090.477888][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2091.579503][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2092.691089][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2093.803384][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2094.915002][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2096.027357][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2097.138949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2098.251324][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2099.362822][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2100.485667][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2101.597318][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2102.699005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2103.810570][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2104.933492][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2106.034404][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2107.147800][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2108.258350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2109.370689][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2110.492859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2111.594483][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2112.118225][ T9888] Bluetooth: hci1: command 0x0405 tx timeout [ 2112.706194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2113.818284][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2114.929956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2116.042458][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2117.164560][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2118.276723][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2119.377767][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2120.489959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2121.601634][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2122.724513][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2123.825499][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2124.948573][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2126.049401][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2127.161720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2128.273279][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2129.385682][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2130.497196][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2131.620049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2132.731778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2133.833610][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2134.944941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2136.057243][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2137.168851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2138.291720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2139.392727][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2140.505064][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2141.627281][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2142.729992][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2143.840493][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2144.952750][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2146.075080][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2147.176621][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2148.298953][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2149.400534][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2150.512167][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2151.624647][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2152.736053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2153.848415][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2154.970616][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2156.082845][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2157.194524][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2158.296213][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2159.407734][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2160.520132][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2161.631596][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2162.754495][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2163.855522][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2164.967808][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2166.079387][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2167.191670][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2168.303310][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2169.426226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2170.537873][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2171.639485][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2172.751053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2173.874083][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2174.974950][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2176.087237][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2177.198853][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2178.311208][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2179.422719][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2180.535126][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2181.071513][ T7492] bridge_slave_1: left allmulticast mode [ 2181.077182][ T7492] bridge_slave_1: left promiscuous mode [ 2181.083572][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.093283][ T7492] bridge_slave_0: left allmulticast mode [ 2181.098940][ T7492] bridge_slave_0: left promiscuous mode [ 2181.105047][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.336293][ T7492] ÿÿÿ: Port device geneve0 removed [ 2181.528751][ T7492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2181.540841][ T7492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2181.553111][ T7492] bond0 (unregistering): (slave ÿÿÿ): Releasing backup interface [ 2181.564605][ T7492] bond0 (unregistering): Released all slaves [ 2183.060503][ T7492] tipc: Disabling bearer [ 2183.066072][ T7492] tipc: Disabling bearer [ 2183.072407][ T7492] tipc: Left network mode [ 2183.233596][ T7492] hsr_slave_0: left promiscuous mode [ 2183.240864][ T7492] hsr_slave_1: left promiscuous mode [ 2183.260442][ T7492] veth1_macvtap: left promiscuous mode [ 2183.266306][ T7492] veth0_macvtap: left promiscuous mode [ 2183.273257][ T7492] veth1_vlan: left promiscuous mode [ 2183.278664][ T7492] veth0_vlan: left promiscuous mode [ 2183.777334][ T7492] ÿÿÿ (unregistering): Port device team_slave_1 removed [ 2183.825485][ T7492] ÿÿÿ (unregistering): Port device team_slave_0 removed [ 2184.515824][ T7492] IPVS: stop unused estimator thread 0... [ 2188.746038][T21544] Bluetooth: hci3: command 0x0406 tx timeout [ 2192.026006][ T50] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.096010][ T50] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.152004][ T50] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.220142][ T50] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.363280][ T50] bridge_slave_1: left allmulticast mode [ 2192.368990][ T50] bridge_slave_1: left promiscuous mode [ 2192.375513][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.384474][ T50] bridge_slave_0: left allmulticast mode [ 2192.390116][ T50] bridge_slave_0: left promiscuous mode [ 2192.396162][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.814951][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2192.826458][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2192.837739][ T50] bond0 (unregistering): (slave team0): Releasing backup interface [ 2192.848259][ T50] bond0 (unregistering): Released all slaves [ 2193.172906][ T50] hsr_slave_0: left promiscuous mode [ 2193.179229][ T50] hsr_slave_1: left promiscuous mode [ 2193.188110][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2193.198923][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2193.208641][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2193.216447][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2193.241398][ T50] veth1_macvtap: left promiscuous mode [ 2193.246998][ T50] veth0_macvtap: left promiscuous mode [ 2193.253098][ T50] veth1_vlan: left promiscuous mode [ 2193.259087][ T50] veth0_vlan: left promiscuous mode [ 2193.816238][ T50] team0 (unregistering): Port device team_slave_1 removed [ 2193.863806][ T50] team0 (unregistering): Port device team_slave_0 removed [ 2194.637452][ T50] IPVS: stop unused estimator thread 0... [ 2199.694579][T21544] Bluetooth: hci0: command 0x0406 tx timeout [ 2236.474615][ T31] INFO: task udevd:20018 blocked for more than 143 seconds. [ 2236.482053][ T31] Not tainted syzkaller #0 [ 2236.487465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2236.496226][ T31] task:udevd state:D stack:22568 pid:20018 tgid:20018 ppid:5233 task_flags:0x400140 flags:0x00080003 [ 2236.508208][ T31] Call Trace: [ 2236.511487][ T31] [ 2236.514420][ T31] __schedule+0x1798/0x4cc0 [ 2236.519022][ T31] ? __pfx___schedule+0x10/0x10 [ 2236.523908][ T31] ? schedule+0x91/0x360 [ 2236.528578][ T31] schedule+0x165/0x360 [ 2236.532774][ T31] io_schedule+0x80/0xd0 [ 2236.537050][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 2236.542469][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2236.548659][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 2236.555255][ T31] ? __filemap_get_folio+0x720/0xaf0 [ 2236.561946][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 2236.567286][ T31] do_read_cache_folio+0x1aa/0x590 [ 2236.573380][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2236.578880][ T31] read_part_sector+0xb6/0x2b0 [ 2236.584706][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 2236.590110][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 2236.595796][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 2236.601812][ T31] bdev_disk_changed+0x75f/0x14b0 [ 2236.606995][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 2236.612475][ T31] ? wait_on_inode+0xc0/0x230 [ 2236.617227][ T31] blkdev_get_whole+0x380/0x510 [ 2236.622119][ T31] bdev_open+0x31e/0xd30 [ 2236.627280][ T31] blkdev_open+0x457/0x600 [ 2236.631976][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 2236.637021][ T31] do_dentry_open+0x953/0x13f0 [ 2236.641824][ T31] vfs_open+0x3b/0x340 [ 2236.649936][ T31] ? path_openat+0x2ecd/0x3830 [ 2236.655353][ T31] path_openat+0x2ee5/0x3830 [ 2236.661701][ T31] ? __pfx_path_openat+0x10/0x10 [ 2236.667605][ T31] do_filp_open+0x1fa/0x410 [ 2236.672144][ T31] ? __lock_acquire+0xab9/0xd20 [ 2236.677022][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2236.683035][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2236.689850][ T31] ? alloc_fd+0x64c/0x6c0 [ 2236.694311][ T31] do_sys_openat2+0x121/0x1c0 [ 2236.699970][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2236.705214][ T31] __x64_sys_openat+0x138/0x170 [ 2236.710210][ T31] do_syscall_64+0xfa/0xfa0 [ 2236.714742][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2236.720875][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2236.727046][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2236.733731][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2236.739653][ T31] RIP: 0033:0x7f84d44a7407 [ 2236.745152][ T31] RSP: 002b:00007ffd25a9dd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2236.753651][ T31] RAX: ffffffffffffffda RBX: 00007f84d4c68880 RCX: 00007f84d44a7407 [ 2236.761640][ T31] RDX: 00000000000a0800 RSI: 00005610b5ed1a10 RDI: ffffffffffffff9c [ 2236.770646][ T31] RBP: 00005610b5ec1910 R08: 0000000000000000 R09: 0000000000000000 [ 2236.779727][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005610b5ef40d0 [ 2236.787846][ T31] R13: 00005610b5ecf190 R14: 0000000000000000 R15: 00005610b5ef40d0 [ 2236.796068][ T31] [ 2236.799204][ T31] [ 2236.799204][ T31] Showing all locks held in the system: [ 2236.848299][ T31] 1 lock held by khungtaskd/31: [ 2236.853202][ T31] #0: ffffffff8e53d360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2236.923152][ T31] 2 locks held by getty/5623: [ 2236.927889][ T31] #0: ffff88814d8370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2236.944530][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2236.962629][ T31] 1 lock held by udevd/20018: [ 2236.967395][ T31] #0: ffff888025e6e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 2236.976719][ T31] 1 lock held by syz.9.11786/18681: [ 2236.981920][ T31] #0: ffffffff8e542df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2236.993212][ T31] 1 lock held by syz-executor/19115: [ 2236.998562][ T31] #0: ffffffff8e542df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 2237.009581][ T31] [ 2237.011916][ T31] ============================================= [ 2237.011916][ T31] [ 2237.021172][ T31] NMI backtrace for cpu 1 [ 2237.021189][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2237.021212][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2237.021224][ T31] Call Trace: [ 2237.021232][ T31] [ 2237.021242][ T31] dump_stack_lvl+0x189/0x250 [ 2237.021280][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2237.021312][ T31] ? __pfx__printk+0x10/0x10 [ 2237.021352][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2237.021391][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2237.021422][ T31] ? __pfx__printk+0x10/0x10 [ 2237.021453][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2237.021478][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2237.021510][ T31] watchdog+0xf60/0xfa0 [ 2237.021538][ T31] ? watchdog+0x1e2/0xfa0 [ 2237.021567][ T31] kthread+0x711/0x8a0 [ 2237.021601][ T31] ? __pfx_watchdog+0x10/0x10 [ 2237.021623][ T31] ? __pfx_kthread+0x10/0x10 [ 2237.021655][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2237.021696][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2237.021714][ T31] ? __pfx_kthread+0x10/0x10 [ 2237.021744][ T31] ret_from_fork+0x4bc/0x870 [ 2237.021769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2237.021799][ T31] ? __switch_to_asm+0x39/0x70 [ 2237.021817][ T31] ? __switch_to_asm+0x33/0x70 [ 2237.021835][ T31] ? __pfx_kthread+0x10/0x10 [ 2237.021864][ T31] ret_from_fork_asm+0x1a/0x30 [ 2237.021898][ T31] [ 2237.021905][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2237.169452][ C0] NMI backtrace for cpu 0 [ 2237.169469][ C0] CPU: 0 UID: 0 PID: 18598 Comm: syz.5.11768 Not tainted syzkaller #0 PREEMPT(full) [ 2237.169488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2237.169498][ C0] RIP: 0010:validate_chain+0x2c4/0x2140 [ 2237.169525][ C0] Code: 00 00 83 3d 4d 2e 46 0e 00 0f 84 a2 17 00 00 b8 01 00 00 00 65 48 8b 0d ea 98 47 11 48 3b 8c 24 d8 00 00 00 0f 85 43 1c 00 00 <48> 81 c4 e0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 6d eb 09 [ 2237.169540][ C0] RSP: 0018:ffffc9000bce7328 EFLAGS: 00000046 [ 2237.169554][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ef9e850eef103800 [ 2237.169566][ C0] RDX: 0000000000000001 RSI: ffff8880283e2970 RDI: ffff8880283e1e40 [ 2237.169577][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81cf8696 [ 2237.169588][ C0] R10: ffffc9000bce7658 R11: ffffffff81ad1660 R12: 0000000000004008 [ 2237.169600][ C0] R13: ffff8880283e2970 R14: ffff8880283e2970 R15: 0ac0d5affe09d4ff [ 2237.169612][ C0] FS: 0000000000000000(0000) GS:ffff8881257be000(0000) knlGS:0000000000000000 [ 2237.169625][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2237.169637][ C0] CR2: 00007f4c48117d60 CR3: 000000000e338000 CR4: 00000000003526f0 [ 2237.169651][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000ee [ 2237.169661][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2237.169671][ C0] Call Trace: [ 2237.169677][ C0] [ 2237.169684][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 2237.169706][ C0] ? rcu_read_lock_sched_held+0x89/0x100 [ 2237.169729][ C0] ? __lock_acquire+0xab9/0xd20 [ 2237.169751][ C0] __lock_acquire+0xab9/0xd20 [ 2237.169772][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2237.169789][ C0] lock_acquire+0x120/0x360 [ 2237.169806][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2237.169829][ C0] is_bpf_text_address+0x47/0x2b0 [ 2237.169847][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2237.169864][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2237.169882][ C0] kernel_text_address+0xa5/0xe0 [ 2237.169900][ C0] __kernel_text_address+0xd/0x40 [ 2237.169915][ C0] unwind_get_return_address+0x4d/0x90 [ 2237.169937][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2237.169961][ C0] arch_stack_walk+0xfc/0x150 [ 2237.169986][ C0] stack_trace_save+0x9c/0xe0 [ 2237.170008][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2237.170035][ C0] save_stack+0xf5/0x1f0 [ 2237.170058][ C0] ? __pfx_save_stack+0x10/0x10 [ 2237.170080][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 2237.170109][ C0] ? vfree+0x25a/0x400 [ 2237.170128][ C0] ? kcov_close+0x28/0x50 [ 2237.170144][ C0] ? __fput+0x44c/0xa70 [ 2237.170164][ C0] ? task_work_run+0x1d4/0x260 [ 2237.170178][ C0] ? do_exit+0x6b5/0x2300 [ 2237.170191][ C0] ? do_group_exit+0x21c/0x2d0 [ 2237.170204][ C0] ? get_signal+0x1285/0x1340 [ 2237.170221][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 2237.170238][ C0] ? exit_to_user_mode_loop+0x72/0x130 [ 2237.170254][ C0] ? do_syscall_64+0x2bd/0xfa0 [ 2237.170270][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.170290][ C0] __reset_page_owner+0x71/0x1f0 [ 2237.170314][ C0] __free_frozen_pages+0xbc4/0xd30 [ 2237.170341][ C0] vfree+0x25a/0x400 [ 2237.170363][ C0] ? __pfx_kcov_close+0x10/0x10 [ 2237.170380][ C0] kcov_close+0x28/0x50 [ 2237.170396][ C0] __fput+0x44c/0xa70 [ 2237.170420][ C0] task_work_run+0x1d4/0x260 [ 2237.170437][ C0] ? __pfx_task_work_run+0x10/0x10 [ 2237.170452][ C0] ? do_exit+0x6b0/0x2300 [ 2237.170465][ C0] ? kmem_cache_free+0x19b/0x690 [ 2237.170490][ C0] do_exit+0x6b5/0x2300 [ 2237.170506][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2237.170530][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2237.170554][ C0] ? __pfx_do_exit+0x10/0x10 [ 2237.170574][ C0] do_group_exit+0x21c/0x2d0 [ 2237.170588][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2237.170605][ C0] get_signal+0x1285/0x1340 [ 2237.170632][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 2237.170648][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 2237.170666][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2237.170689][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 2237.170707][ C0] exit_to_user_mode_loop+0x72/0x130 [ 2237.170724][ C0] do_syscall_64+0x2bd/0xfa0 [ 2237.170739][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2237.170755][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.170770][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2237.170787][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.170803][ C0] RIP: 0033:0x7fb9bc5c1785 [ 2237.170816][ C0] Code: Unable to access opcode bytes at 0x7fb9bc5c175b. [ 2237.170824][ C0] RSP: 002b:00007fb9bd3fcf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2237.170839][ C0] RAX: fffffffffffffdfc RBX: 00007fb9bc7e5fa0 RCX: 00007fb9bc5c1785 [ 2237.170852][ C0] RDX: 00007fb9bd3fcfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2237.170862][ C0] RBP: 00007fb9bc611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2237.170873][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2237.170883][ C0] R13: 00007fb9bc7e6038 R14: 00007fb9bc7e5fa0 R15: 00007fffa5e7bc48 [ 2237.170902][ C0] [ 2237.831893][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2237.838810][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2237.848028][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2237.858103][ T31] Call Trace: [ 2237.861389][ T31] [ 2237.864324][ T31] dump_stack_lvl+0x99/0x250 [ 2237.868928][ T31] ? __asan_memcpy+0x40/0x70 [ 2237.873524][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2237.878731][ T31] ? __pfx__printk+0x10/0x10 [ 2237.883355][ T31] vpanic+0x237/0x6d0 [ 2237.887338][ T31] ? __pfx_vpanic+0x10/0x10 [ 2237.891846][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2237.897308][ T31] panic+0xb9/0xc0 [ 2237.901027][ T31] ? __pfx_panic+0x10/0x10 [ 2237.905461][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2237.910839][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2237.916994][ T31] watchdog+0xf9f/0xfa0 [ 2237.921157][ T31] ? watchdog+0x1e2/0xfa0 [ 2237.925489][ T31] kthread+0x711/0x8a0 [ 2237.929572][ T31] ? __pfx_watchdog+0x10/0x10 [ 2237.934250][ T31] ? __pfx_kthread+0x10/0x10 [ 2237.938844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2237.944048][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2237.949247][ T31] ? __pfx_kthread+0x10/0x10 [ 2237.953843][ T31] ret_from_fork+0x4bc/0x870 [ 2237.958446][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2237.963572][ T31] ? __switch_to_asm+0x39/0x70 [ 2237.968340][ T31] ? __switch_to_asm+0x33/0x70 [ 2237.973105][ T31] ? __pfx_kthread+0x10/0x10 [ 2237.977702][ T31] ret_from_fork_asm+0x1a/0x30 [ 2237.982479][ T31] [ 2237.985858][ T31] Kernel Offset: disabled [ 2237.990180][ T31] Rebooting in 86400 seconds..