last executing test programs: 6m25.605467967s ago: executing program 32 (id=47): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f0000000000)={0xc}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000000c0)={0x20, 0x1, &(0x7f0000000040)="fde9bbd0b570d4fab910cff5ce2f1be8023ad4fd14c4fd62ab555f8ed79ed2cd3ba63c564fca522594a5a974c43481ec66d866", 0x9, 0x7fffffffffffffff}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x6) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket$nl_sock_diag(0x10, 0x3, 0x4) read(r3, &(0x7f0000000280)=""/96, 0x60) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a0000f2ff0000"]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5b79, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) 4m44.086381608s ago: executing program 33 (id=749): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendfile(r1, r0, &(0x7f00000000c0)=0x5, 0x80000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032abd7000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="05000000", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x8804) (async) listen(r1, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r6 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)={'#! ', './file0'}, 0xb) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x7d4165c9) (async) listen(r8, 0x0) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0xfffffffffffffffc, 0x0) (async) listen(r11, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x3e, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021aad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, '\x00', 0x18}, 0x10}, 0x1c) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r12, &(0x7f00000001c0)=""/4068, 0xfe4) sendmsg$AUDIT_GET_FEATURE(r12, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x40040) (async) socket$netlink(0x10, 0x3, 0x8000000004) 4m27.100213633s ago: executing program 34 (id=845): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x125101, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x95, 0x35, 0x8, 0x16ca, 0x1502, 0x1eb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0x47, 0xa0, 0x7e}}]}}]}}, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 4m19.27422934s ago: executing program 6 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) syz_usb_connect(0x0, 0x3c1, &(0x7f0000000a00)=ANY=[@ANYBLOB="120110011accc1402d1e8500e896010203010902af0302050790060904e99700ffab4b010904"], 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r0) (async) syz_usb_connect(0x0, 0x3c1, &(0x7f0000000a00)=ANY=[@ANYBLOB="120110011accc1402d1e8500e896010203010902af0302050790060904e99700ffab4b010904"], 0xfffffffffffffffd) (async) 4m18.711196604s ago: executing program 35 (id=884): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000080)={0x2007a}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc5, 0xc}) (async) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x63}, 0xff}], 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000030000000400000060047866726d30000000000000000000000076657468315f766c616e000000003d862b0e341300006970366772657461703000000000000076657468315f746f5f68737200000000aaaaaaaaaa4100000000ff00aaaaaaaaaa2200ffff00ffff6e00000016010000460100004e464c4f470000000000000000000000000000000000000000000000000000005000000000000000090000000700030000000000a5ecc33c8098bd0cfd5f4b6c99ce611e76187a16838331311491c4572a2e254445042fe6977692743457dab959c48f3fe65c0480f2bd5eb4d27f089cda6251c5000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000feffffff000000000500000005000000000076657468315f746f5f6261746164760076657468305f746f5f7465616d00000070696d367265670000000000000000006e723000000000000000000000000000ffffffffffffff00ff0000ffaaaaaaaaaabbffff000000ffe6000000160100004602000074696d650000000000000000000000000000000000000000000000000018000000000000000400000001ffffff2a3d0000f8310100feffffff03030000636c757374657200000000000000000000000000000000000000000000000000100000000000000072000000000000000900000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000006000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000100000073797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733000"/1052]}, 0x494) (async) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000002c42cb6a36fc6714fc3c0d42ef", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4000801}, 0xd0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01064c1, &(0x7f00000000c0)={r9}) (async) madvise(&(0x7f0000499000/0x4000)=nil, 0x4000, 0x11) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m18.156160913s ago: executing program 6 (id=886): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x1a, 0x0, 0x100000015) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005e9eb4104c053800f516010203010902120001000000000904"], 0x0) fsopen(&(0x7f0000000000)='nsfs\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xb5) syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0x22, 0x4c, {0x4c, 0x31, "0ae6d7a7ee127f648547ee39af3fe0b84a8dd2ce6fcb2fdea7b7df294b050b89b1596f11da92213a91255d7ab6d3476e92ea3f19f3e98162c8623ccae95c8aa135ac63aaa7cd12698d76"}}, &(0x7f0000000100)={0x0, 0x3, 0x90, @string={0x90, 0x3, "921ac4b6f550502fbea74f2727721ea9bac14c40b88339215623e8a7f78c84762870eb0fcc88cbd6cc707ccca183eab51685c58c2c0ca31adee0e601e03a53d4ec46f55db06255f8553e4168a8c5d153a95bb7470555bab787570240854a73008b4971f3e0cb3bebc588599513ff736e39da366e685a65a8bee1e2ab3ca2f98b7cf1a5ff2a031deb4daf4a6674b6"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0xe, 0x69, "c3b9d5411bff82a2e9f39e760a49e3cc4b39eb979a2ba8bace07909d8772d4cb124ed03636e085fd6b23a44217bf365236293181ffc61823dd5580a61fc91597e24c45913af19ba666de6523142db95115b2a4601c0505dfbe3fbda8e0953f3e5246aa6a1f1dfdec47"}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "a8940171e9fe0163e1a8d5e36530a626fbb6e674b08dceebfddea6111695020dd46ad5b8b8d3a35363ada7af37fb03"}}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)="51f029", 0x1b}, 0x1, 0x0, 0x0, 0x44}, 0xc010) 4m16.471989931s ago: executing program 6 (id=892): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0x12, 0x0, &(0x7f00000027c0)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x47, 0x80, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000100}, 0x9001) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000100)=0xfffffff7, 0x4) 4m16.128862237s ago: executing program 6 (id=895): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e07040814"], 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x3c) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0xb) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000a0601010000000000000000030000070500010007000000180007800900120073797a3000000000060004404e200000e8ea5de234a530976b4ae944d9616379ed4a6d4a863b6678c8bc23a865e23de860dd56c09478f0f71d9b07eedaaf1adffac7b0fc79d38c23d9b979b6cd3b1a1bd852ef7d5546a2a2ac812f04a20dbb3c39688f29b9cd51306d47dbdf"], 0x34}, 0x1, 0x0, 0x0, 0xafb9803721261558}, 0x488c) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000540)="1afb1f000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000002c0)={0x10080, 0x74, 0x24}, 0x18) unlinkat(r4, &(0x7f0000000300)='./file0\x00', 0x200) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x75}, "edb32cd99623939b3e124992d8971edbe8c156d273ea791801e857c6a4cf076f9c2b1bac104e0aab1d21108810c1b1b6667c138a44f42142ba1a769f51d85d6d7a9b96fcfd4b7e2e5c7e55acb7c50bfbf00e0f2c902d3b79692bf7370ffc4e9b955713d4fd5439dc2670c68fc908234913734bfb6a"}, 0x79) 4m16.042966746s ago: executing program 6 (id=897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 4m15.624745864s ago: executing program 6 (id=899): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x7f, 0x4) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000e40)=""/217, 0xd9}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f00000005c0)=""/127, 0x7f}], 0x9}, 0x0) syz_clone(0x41004100, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 4m15.334795585s ago: executing program 36 (id=899): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x7f, 0x4) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x3000)=nil) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000e40)=""/217, 0xd9}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f00000005c0)=""/127, 0x7f}], 0x9}, 0x0) syz_clone(0x41004100, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 2m49.272802054s ago: executing program 4 (id=1324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002900)={0x2c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x880) r1 = syz_usbip_server_init(0x4) syz_usb_connect(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x0) write$usbip_server(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000030000000100000000000000010000000800000fff00000013000000340000000300000001000000000000000000000002000000ffff00000007001100080000000600000008000000017fffffffb95533d8d5b301bd6e4ecf6ab8d310ba00b09d73d0ab780160d0bdb42aa3a644d2d9b26b3c303335f4804f47b191701502a5819e097836e1c5b6a769be280e10da3ee1c70340ac3b6e911cad46547d73611f8344527a96b724ac45b5cd9c9e10fb78246f4ecc0ccc3f1c3f15223c1ea5232d70d00883f2aad28597fb5a2e34af8f2022bc9d89ef5dd662f1330a669a0ce2c92a2645fdb43fad249894091009d5c84787619ce52c3f030572b9296d06bc10ff5a82adde6b6b696e8e38b97980c91981b42ceafc6c58f51a08c71a266001795d70f664995b097b704d57f12e5a5c3965563661c0ab6d53919fa462aa7c64814437dcf757"], 0x60) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x6, 0xa390, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x66, 0x0, 0xe, 0x29, 0x0, @private=0xa010102, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x7, [{@multicast1, 0x3}]}]}}}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000f40)={'erspan0\x00', 0x0, 0x700, 0x8000, 0xa, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) writev(r3, &(0x7f0000001580)=[{&(0x7f0000000080)="2e9b020007e03dd65193dfb6c575963f88fb", 0x12}], 0x1) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x3, @vifc_lcl_ifindex=r2, @remote}, 0x10) 2m48.61919802s ago: executing program 4 (id=1330): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f00003e5000/0x1000)=nil, 0x1000, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) splice(r1, 0x0, r1, 0x0, 0xb, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000715000/0x1000)=nil, 0x1000}, 0x2}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000800)={{}, 0xfd}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x2000, 0x8000, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m48.302548579s ago: executing program 4 (id=1333): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="737461636b203a0008c499100949c23262e80dfac1d62d08d42dceea7045b533260ba0d30b2345c44997fd10d56d0e2c427b3ca73ac20a6a4e0cf57dde73abc9d59b8049838b1c009c699a03ddd674e577650ab0284c95f7501f950601b8a322c74d9edf6bc06aea1ff1a4269529ffa5e90880f13074c542e5616eb82b3b860b5f187458e50cef0f4f10592107ade7949667507327592137c20b5e7774e51adc60ee516fd27c3cd9840b1c2556382214ea28746df6a5d6d7d5ec9b12a6d51c1999e7a0091bfd0a5a25fe43065e27454b8c95139e8a0c2b8363c0fd7d7443d5cafebb5e4b"], 0xe4) syz_clone(0xaa081180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m48.100890229s ago: executing program 4 (id=1335): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x9, 0x20000000, 0x400, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000006c0)=0x4) write$FUSE_ATTR(r1, &(0x7f0000005340)={0x78, 0x0, r2, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r3, r4, 0xb, 0x8, 0x1000000}}}, 0x78) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@nfs_export_on}], [{@euid_gt={'euid>', r3}}, {@uid_eq={'uid', 0x3d, r3}}, {@permit_directio}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}]}) 2m47.786988411s ago: executing program 4 (id=1339): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0x0, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0xd, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0xb, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000030000ce"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) r7 = creat(&(0x7f0000001380)='./file0\x00', 0x14) setsockopt$packet_buf(r7, 0x107, 0x5, 0x0, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x31384142}) 2m46.720663648s ago: executing program 4 (id=1345): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) (async) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000100000005301020301c9197d537683de7917090e1209014fae0900"], 0x0) 2m31.725284295s ago: executing program 37 (id=1345): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) (async) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000100000005301020301c9197d537683de7917090e1209014fae0900"], 0x0) 2m1.945575931s ago: executing program 7 (id=1595): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfff, 0x2080) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x1, 0x1, 0xffffffff, 0x94c, 'syz1\x00', 0x10}, 0x3, 0x20, 0x8c7, r1, 0x1, 0x3, 'syz1\x00', &(0x7f0000000080)=['\x00'], 0x1}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0xc, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x4048880) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10800, 0x16) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x100010, r2, 0xd5270000) bind$alg(r2, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r3 = openat(r2, &(0x7f0000000480)='./file0\x00', 0x0, 0x10) rseq(&(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2, 0x3, 0x80000001, 0x898f}, 0x1}, 0x20, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000580)={0x0, &(0x7f0000000540)="89355db3fc81a9f4aa8d563c1c6289351445a5b4b06f", 0x16}) rseq(&(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1, 0x2, 0x8, 0x7fffffffffffffff}, 0x5}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x6, 0x8000000000000001, 0x7fff, 0x268fa354}, 0x1}, 0x20, 0x0, 0x0) r4 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x20, 0x5, 0xab, 0xb}, {0x9, 0x5, 0x7, 0x2, 0x400, 0xc, 0xe}, {0x9, 0x5, 0x2, 0x3, 0x40, 0xfc, 0x4, 0x8}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0xe, 0xd1, {0xd1, 0x21, "be7b42c38915db2b0fcaa63cf01df04dcd200e6cc9e7742c3b1209d908e2709fba0df98a0c5fa01445d584d2bc6955d04ca5e166eb6aea4a9dacdbb6b266bf0fe675efa05bc219bc7a1022f59c6b6affceb54abae38a77042c8dfef46b82779f46ad715963f453f6bb9f2ca2ab1931d0538732a2ecec25ac84b054165b5c0eecf8af1694d0eb1d076769ea4cd8e9229d644dd7ecffaf0edb9fb7fc505a5ee5817eb4126e99b84910b917e1baab11af7ca498568684ea558a5f25bb04eeb0a238426e2d102b625a2db16a4ff5b3381b"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000840)={0x0, 0xf, 0xf1, {0x5, 0xf, 0xf1, 0x3, [@generic={0xd1, 0x10, 0x2, "9186d14ef6451816454531adeb6815a081081940657411cc36647809734a8c9653c78b5485a019d8ce542126c3a67f1c02eee62da751e51846f3c5940154b332cd0164d42be2e6c6d2b5031817d6536b318e8e5fa747fe27b84b89e379d6ea04b5ee35b89590346b73b66aeb697933411a3f8c96c47d75603a10333df7bddfe26337b9cf19b1331e3e2d5124dc16d787fffea031fb1a1a7f6a80f1fddf9e2cc3257ae1dd6ebf4e755ac1ca5609c7cb04f893621b517582170dc2df63b45f17b089adfbce1ba5861fbffb3be0fa4d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x3, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c960f6da95add40411ca6c3cc661aedf"}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x9, 0x1, "4efb1405", "5a33e65a"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x2, 0x1, 0xf7, 0x2, 0x5, 0x7}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x40, 0xb, 0x9d, "340faf793fd7e59c85462de5ecba10197ae6f6e0257380d2e8abb06fc31e12f4a49a339d10db669f9f5c0096814f1fd959a06f05b76f2e15ad2cb08346259900255f5a50362a2dbe8677420cf72b3e5bbb2fc53f04c3b948f3fc0fca5b47c9d9aa9913079c80097087daea6e820276138f3f911ee4d50020ca167e3ff8b6b1a51c8a4c4cfa2f4b7dc52a517c6f5f8cbd948e1cb79f62c3b92a937bacc8"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000b00)={0x0, 0x8, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x2, 0x1, [0xff]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "ad5c"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0xfc}, &(0x7f0000000cc0)={0x40, 0x13, 0x6}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @random="b6d0c06610e9"}, &(0x7f0000000d40)={0x40, 0x19, 0x2, 'wo'}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x8}}) rseq(&(0x7f0000000f40)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) ppoll(&(0x7f0000000f80)=[{r2, 0x10000}, {r3, 0x200}, {r2, 0x40}, {r2, 0x1000}, {r2, 0x2000}, {r3, 0x6000}], 0x6, &(0x7f0000000fc0)={0x0, 0x989680}, &(0x7f0000001000)={[0xc61]}, 0x8) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000001040)=0x3) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000001080), &(0x7f00000010c0), 0x2, 0x3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000001140)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x40, 0x1409, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20020010) r6 = syz_open_dev$usbfs(&(0x7f0000001280), 0x8, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) lsm_set_self_attr(0x65, &(0x7f00000012c0)={0x66, 0x7f, 0x54, 0x34, "4eeb86c7589ef28a7db9ee227953a0c2a3508250fc18af6495e57d9878bb615858a69998b1389cc7241fd98de3cf063489f2400c"}, 0x54, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000001340)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001380), 0x2da780, 0x0) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f00000013c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x201, 0x0) lsm_get_self_attr(0x64, &(0x7f0000001440)={0x0, 0x0, 0xa9, 0x89, ""/137}, &(0x7f0000001500)=0xa9, 0x1) 2m1.328768674s ago: executing program 7 (id=1599): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x39a, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x7, 0x7, 0x2}}) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) unshare(0x28000600) (async) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x5, 0xb) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000200)={@remote, 0x5f}) (async) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x33, &(0x7f0000000780), 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) (async) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$alg(r5, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="4da56490bbd287d70bd717242f694518cba232550532b642f59dae00d57446ca19352fc9ddd2eba9a88c766d8e25ea7291c9fa0c3a36f00b107e937a555fa31b25a05026a3c5c9074f4e66929c19cb8506371a140a11c7c2326bae862acb5757cc71767506343c02500f55b56f4f6964418ea1c286e9fa41534bb6156498c567184de80afabbda9ba6914d0696403f2a026143674a2d9f3e0f3e3fde68e89d89f76aad7087", 0xa5}, {&(0x7f0000000100)="157d48e9cd0e36620e79238fca0e643b15da9ffabb6a09119ea17d7badffb2df338feb4e1207cbac5f1a57ce38317f580a9bb0618bbcf6e6723702fbbc93a3d9bec78eea67751bb9f5c902c27241307830a0ddb0e88afac433fd68d6dcbc", 0x5e}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000280)=[@assoc={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="d61cbe69c90a69998ff87394637ba0c2a56650b85160dc686675163e9cf2e2f42cb062980c1f030b19c33678a6ce786b258199030bf833fe50f5e9aedcd4c0c4fff3b63e694522eb6b2baab78cbca50961e8288146c5a54c87dd60ccb7d8cfeffb6eb8d15f8ef53daea47c2acbb50b571afd2bebae2595339bc62eaaecb6ca1a6e7b97f05a221055deafc9198b75898062af36ddc06f007946477615b1179ce1cf173a4d05978c1066d82fc29d798e3d80c6d0d1e2db33ed31d32cd24fc1b7d62f4a1e25f81565d222f2a9d022a3", 0xce}, {&(0x7f00000005c0)="9182f440917403e278ffc733db7410629680cdc3f204efcb563ea15dd7245e0fad8412421000a25c89ba5845c8564abc570fb36df56271e81d6fb24b2f3bb531fb1afd7d3091862b1c775d9f1d73ec81", 0x50}], 0x2, &(0x7f00000028c0)=ANY=[@ANYBLOB="d8000000000000001701000002000000c3100000cd562e0ca777fde01682a368b40a8949e957a9b103ee5e85cf1af50ad00b135bbec2c5f2d196f90cf86cf30a0db4213547ad819ab173f28a3c35bebbd93e4ebcf3e840f291b6b2bb015f4ab576db6c7e297224fc8cf1f98310db166b7784dc94ca262c6b4d137475097d5b7895372de36789cd27e8ed329fdc4e942d203114d1bf29c2619ce1671f350454af8f1d7f72eb2650ffd30bfa80830c4b48de36f6a2c251c951477c33df7940ed8f3d0202b013a59fc47bbed100628ca46e85aa1de999860600180000000000000017010000040000000000c00200000000"], 0xf0, 0x40000}, {0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000029c0)="750df615603c89958e796f895e6d970a0ede1de33e8c845dd7364997f9d7fe40d3fd2e48e5dc269add2c8743812a00809cdebd6624e5b0c3fbc87800c6511d53a0dc2759abdf62e313e68840aeb86e6a226c600cd1819d79f6d4169adb0c81f74d3b1161611d688a8ea1b8fa7f4d9eaa336e5d48fcf75d76e02031941cb09cc065aedc6133ee0d6d13d72469bb3d894ef64d2a8412a7869f2cfafc3dda0420479aa329fa85c5a248c8e020506e66dc843fd3853a1e18", 0xb6}, {&(0x7f0000002a80)="488a6e12f1f647a4b6b7395d0652ca8dab4690049abddbcff4ee6810f2ffa1be3f8ee72d3e105bcdcf3ebd5bb54069f2341ae6657bdbf6a847891639117651508a15a4f20220fef5cb0ff09d", 0x4c}, {&(0x7f0000002b00)="d3acb03a3711a7f3cc4ed0375c1ded43cfa4738b07f061d30d8299f3e5c497a1784b554d43a49c4a34eb78be99fb4630e98ba52f79df0dfa3c681c8a9514e61d9dcd9d7fe0b30d42970303cdde50730a3a3f2331b942f8948848e2444a0e00d05d10c62ca9915e0be8a4481118c5ce7340e93d9ba4ac3b7a01a74b3c85d56e2144364f3e3b94ad7cd6e75145153e7756576a81d66da99b0e1e104235551dbae15defbfee0e70fd2d3f0697340739e7d8907662ba02e25867c1749141135d67835334887d00c9a4", 0xc7}], 0x3, &(0x7f0000002c40)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x80}, {0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="ddfe920009bc8510a7f84e1383a28e00e34335d6526f9035deaffb1cbab96c23178271190de623d72efe57afef30bbcdf5502651d56a252bc92f6c46edd1ee2a828fdfad2cd854001952c62342d12698de84d9721732cec74681988961c64a49f37389565ee5a14d01cece67891ec27b98ff4d261bc6f134922d853eb3d6ae22", 0x80}, {&(0x7f0000003d00)="e16298221b98dbd945e2e2546f41694dc4759da3863fde4416826f23d19a7c9138885ec63e30b699c9954bae3aaa97ee2b0a546d65dd1dece1245afa91aeb373583f7450620d44af76fb5545217ec2f6fadea218f362fd80b30c47d867f765732628e889ffb22711ef86e3500f56c42858df22eb41b03a55b9035231e3984689bac95127f65f24392c89f8a5586ca5fed4a2ed772cafa0d2fdfc0f8f85e5667314add026c8c1c87d52419297adf7d2908bf65dbfe3449e1b5c4dc8", 0xbb}, {&(0x7f0000003dc0)="aa0dc40dddae4d85aa70904676", 0xd}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="300000000000000017010000020000001c000000079117111c56e3e55e8be56618000000000000001701000003000000000000000000000018000000000000001701000004000000020000000000000018000000000000001701000003000000010000000000000018000000000000001701000003000000000000000000000000000000000000000000000000000000860b84c2dd8172d7aefcab00b5d6eed7c81cc2dbaf65283fccbffcbd8e9d73d0ca2e593ec2a420df5e414e321fb4"], 0x90, 0x40}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000003f00)="ac29381b29546ea039e4e67b75", 0xd}], 0x1, &(0x7f0000000800)=[@iv={0x68, 0x117, 0x2, 0x4d, "b8bdcfcc3dae8905676d3bf62c93c5de3d3f9b68aebf826da2a7e0264a4f189c0dc10410e08f6bf0e18c5a725d9c6ed64a22b9a72281597abe1de2ed8ae78bb02f0cd34093ec3b9856af2accb8"}, @iv={0x90, 0x117, 0x2, 0x79, "13ac82dac8af1b3017d18a939a3bdb85967c8a307ca7007d38b11bf079f5bac45b48398c6524484c039e40ba86f04005f78cef85dec80fadbf91f6fbd642131cf11562901827a08110104278e1a76499e49a78e78608179da2bd522a7c71069d048f7ca8ab4f706224fd3f1366861d928c7ee90abaf74cbfd5"}, @iv={0x70, 0x117, 0x2, 0x5b, "fb58e06665c7974a68748b46ca7b312cd21e3c8f4fea8909c6d42e7501c9b61591158e05bfeba6bc140dcb967369e62f6c0500ce3cf7d6a1ed0278d88ca2bf0a6a696687b8b68b6ee07ee03bd04a5686b9d7319fcbaffce8df2e23"}], 0x168, 0x40000}], 0x5, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2m1.237147814s ago: executing program 7 (id=1600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001ec0)="0142e290981aa456fea158e2dc04c7dba038c75c3cfdefb30f7815b090c62392e8", 0x21}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x4040800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m0.976255741s ago: executing program 7 (id=1601): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x48, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000016c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x101402, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6}) 2m0.443997598s ago: executing program 7 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x1, 0x18) r3 = openat(r2, &(0x7f0000000300)='./file0/../file0\x00', 0x4040, 0x84) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000004c0)={0x6, 0x28, '\x00', 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffe30, &(0x7f0000000040)="c4", 0x10001}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001440)={{r0}, "e1f090e08fd922136251bfac9454096ba67d45264c9c5efbc040c831dcbf42642c9a7413f9ecf4e6fc63cace2ac39895c9fe8010cfa7bef407f8e13fd24563126d6919ee8ced4aaac1d73316393ed9fc242a22163b7bf609fa300dbf4209b445432993ef59221e6558975d78a0e581cc8f1987e58387e25d15ba2263d6841fe4aa0efa8b3577651085bb81f80f376169adb0631626199028797c44728f085b1951d259eb56688fa4a9bbe67de09ebe024f61aa4e1b5b7f4bde633e249ac74819998d041b80a126fbaefe37e3d7d3bd8f2bb5429321f50fd5d3965f82bff221a978f6f9a0a3866d933a0064b2344c2277ff7a0979610608634117b54c9d1463a60810e85475087c418847d54578c7d492fb8dea5fc1b2f9da8e5d4793e69ca041525f5e31cdadf3e053053e2ecb8d12b22870408ec27117f91e4a9ecc1964b45b83aeccd51f7cd9b44ecef0ecd13c420dabe63b431f6cf2bebf0346fbf480c1c0f84d812c82b860cc249d70db4434aec90aef99b7dcde2f40c38595156d7ff98dc1b9a5b4853d528d70655c018f0be99fc00309e9627133b287f71b7dc33c1d806c91bef2dd1e5be9c9eeb3c402a8a89c3f6ae011f2e43577631ae5117b0045db5758bde25257e7f931b1a73ae4b799a47dee8637f1e4821a36a2f4abfae0c7a091a4fe3015dfc320a149a1a1e222cdf1fd9a5f95ad8455b542c8bd6ab857d7a5d2be61906cf3dfd15b831190c56de2e39dfd40dff1837a26aff56bbe163ddb88207630f287011cc0c6cc8cdf4e3b471d903ba255cd40cb0e9510d466fd9ecee187b740de5f9001e41f0a86dbd8a86b175675e2a42776fc564944e58a209faa24fe3bc6cb1d4180550f7eafdb4ffdec683d3e73cec8e1b3210cedcf4c9a8798da637e0292a3d0c42ba48d53bfd80514c28c42ca755c4431598652a42e47f21e5609d9f195d6ac1cf489bb0e55bb9c3842ab8ea7fa6dd3275519d6adf6ceb7edebc5d2593a3411498e0fc09285f6fccdd5f5df3d416a35b5fdb354147dbf049b43b3787abcaf57f408d5b79b03e35c497451f4ba2549a6073d9de6bc30a93e3c1ec35785b6fe3d29ff7028469d08765a26077c0c7ceceb3ebe3499a8ac570e877b71a119c180187f2924e7d84391d4cd063e630951e897d6ef56264f4bd26fe5bf1389db45dc3ad3060efac209b21f15cd5c9030a2e467f442fbd55624ef3c4f73283eca57ada3b7849e1e895e51f432a6b2e89b887d161c0fb257119677f03f3ec79c6f417bbcc206264a1b9bd9ac3ac14ba30cc404bacae37542596d248c6098715817e9f135f88027763f756a8900c93d441d1002c96bdbf8d0b602d67d5d30902cbb2ab2ce9f4cf38ab2f22a7c81f8db5e89351863510c13a4d6ff04ef8a8e8f9a93c37ebcc226621056a489a8a45b46bc62dc2de2097bfff1345e4001dcb50610e79844a48fd12c50abbfd852db7b88a468789a33b48c19553ac19e4e52b17fc55f5ed4d3e5706fdcd48c63f1b2056af7d90ba50332b5cb1993d32358745eaa3d931e30acb77839f8c8326e9f61e35a731f89c932ef15cecc647b6189c5e88bbd219c95c33850c50d651c91d120ec71681ebbda28ca667a09dda09c2c7c521ce2db23899ad7e3dc3f3760d2be0ecf7969f23c8147ca5716fbb01939a78ec1788c826c55059ee9edfc1d32168fa4b70d53fd3e60ed8b41c40d015f1515aeff0504103a52831e7a59a8ac06ffc2e59b6e03fa840b65efac39c3d64c7ac257e476ddf12d05dd8ef6996764ae0519b217d0590ff008b0164978063f9d97a7ffad35385238884ad793360d47f0fb78438744ad0a546b6cfaa9a7d9467976c63ea04de2de9c89e3c2c44dabdb30be6b234791bd07c99489d099c484599491ff34657de5b38862990b076c661d762f6ccdc6536562dcc438e9545ef5287271aabd243ae0291dc6f231603e146a6cf1bbb0cc64983a0d88d3826dea6ebabd2a194d918e8a299fd45951ee4e524d6e746933bab62534c4ba60892d0a2b8a09d0b87e225955afcf77544dd951d90463394f75ea52a82e66d449479abe44200d6f6503ccf5d8aaabe217722a604e6b525347bb61e8a18c8e516f92d1d26a3e23f73e01ad37de447640cd6c16f7555eb0f9b484a38883a2f5e7d0c00438f3d4883b65b12470e843012500303dbfb77caa2797713cf252495502f425cf63ed0f1d6d59a9d3b400d7bc230bb9ed335acc71f6f7be19ffd717f7ffdbf0d56923abe02049fab2e22581858656af32a91a28e23d355a7b22dfc1e16b6b150bf9a1c55d770c22d3d63afda781540915a509b401c44c2546c8a258c3517b7f4ab678d608bb446d2f91c4f60ee06e43f149bffb1eaedd1eb8896796cea2060f1d07e12670c7e9c7def74944657072d8c226d25ef8a8319bd89578de780167691ba5b65465ecfe3700a87345c42a0c9a0da82460b2de8f527435139385d3ac7eec333dee087fd09ad844c3c4162828526e1009ca11e2050e7a17291bc6bd0a248211a86f97578776fc2f0aeff7fa86b9ae005626eb18df1cbf776d27a3efb141f54bc01791bfd5967740028d9cd8216f7e780ff40fe053f418d7af84e32213b8f2b00aa746344ddc35f6f0041dd58ed18a3dcdd1b0f9d360ca0cf21589369ca02839e8b7bf8a3ce38fb475184a2b42fe4c194091c1d6bb946781e18f69147bfdb1efec832bc802ed7328a73fe2a7133fccf691a99473de8cfeed988e8b98b1070875a3538c1de2429c9d3ceff868ae0e7b84255756dd94af1b435a26099d59c737b84e44cfa26655d6b9be95a46b32c7a8300f2246209dca9c98e280ce98ac7a847b62e18acb2c21e0ff5fb367df259bcc3f80ac6371b38b50fe78887f76b1565c9a9b139bc9612867cfc6f8931a0be4765c150ba8e7cc72c8a55e71c341412078f2216396501cac1297221909bb61dba243b7136bd87b367e18cd90df0b6bf241e9b633eb4ee1012cf71c25c5b08e29af480ebaa0fbb8f165b899e6ecee9692097e12560d16abf7d0b34ff43b8967da5fe0b592de57fc79d5e2fdca1b3e50126239295eff1a808e4968599eb375cd69310bbc5d7923871bec4a409f3ebd97e9a8efa271c9dd6d916f246e1e15e248e4b1229d8591c2785e657c5e1e5a647dba071d4982cf62006886554102a75da76f6d416c50081cc8ac1e781182e71fea7d7d200617de8a8ecc5b608ff0613cdb9dc44376818f67eae5aa48952e556eee42a3ae65f1734c3991839942ddf8f24f747c2ff993bbcc643abddfad3efafa8427892cb07bf7a61ecd1a3ceb229bd0db4fc99c52d34126a391e2262ba8edb63a4e0fe032bf933b73537a42dde3b9085dda034bb4c816f15c5c185613e2e3d0d5113a57b7a6112871b52070a790e072a744935fa4fd6fed336b6f3edaf3e3edcb5c2520f74652b4ee73b9d87099a33cadcf8a722d383e530f9866f8ed3cc0c62dc01a3bb20292c7ffbc12dd4f5e74cc8e222676c1526b9d3d389d6139f855b182701d9ad95d10cda60712db95a94a9d63c9d347af0a598af767e968e5aa16235b595f59c498180b093bd5c6b7f329fa5fb7740fc99a8bbc168cbaf4ef1a891344e3136897039e72aa8682e7378e96047c6ac6c805bbce07fc54d5debf4c7b52ba872ccb73c83621223af37b7552aa2cc12c57984ff79c9470ba66fcbdb9ba484b60ca2c7edd9f6e47849041d993881251078d908c953046c7c351f3ca5d5a6b5fba759e5e4f917719c42bde4ea6fceeb44b6e50625f8dde9b3a5b7ee16bd122932036b4c23b4d8b9945039257e3ae45c96ea0dd33621fcdea6d8c876950a40f2fefb941a6198720543b90821db2ec4ff0dc0829f553fe4ab86574abc33b4c0a5e98a038cdce6917950eebec567581bc8ce150d32db8b40c467bea10a6b0e79bb0c503fca5ae25d91840cf42069820e38d8c641bb73ebba027f5861566f6b0c1e408a616819378f94d85b0281204fcd1f7f606b1ee28c516d11003e10692f213be8387104bd51ecf7083aa16e067a923c227c8991c7ce4fece41b304fd5c7194aa3f4d5eb02d812a61cc1bf6ed1ef696e610a441ad0e448953f2cc266f2f017755f5b5f381ffe269d74a5d94d1c350aadfdcea6e321a1cf6b2d6a3d91d48a081153d771fcb5a05acacb57646a17d3cad715cbc89880461f11c7c6c2e3b459ae893d84ed39cc79e932165af6a6a225902e9333a6d09bc0be37c6d91a3650083c1612b33c0d0077c6f00d9d61c3ca4aef44ff2f845353dbb9c83054cc6df39634d19b20147197f6ca28000545ba949ed956a3b383135e40234727f38bd7ec65f4da4a7c8171e4906bb5c39d3d674dbc23fe30b7f6869ec31b632ebe7ea2067b57e411590e00efef66b1ee3eb988b503055dd91cb361aa45f153659eb8fc1f78a057c21818d313587ee3aa3076bf82757d14c1e4e17f93ce998b61bc10a1077323b7af9783b444c80ef10d6d904b505337ee11cbdbbaf5007dfbeac291de04c150a310ca85d37693c3e31a552192bc77562ae6cd6c61667ee766612b234005cc5870d3c893b662873a875adbd45c2c357ecef2169da68cc0d655673597ac8c58db8bd5ed199bd9b3424a7a84be04a62ef380ccf7c96205de517aa5b58b7880ec6411485a7bb8083c955e28698a4a98e7e2cbbba8f35aa394d570f0d87bdab4e591d84247dde4abc04576f0201566f6a16502aacd0bd6b1c93bf20d1e59611c0e621d883434c36d204c6c41ed83d60a224426092e8be98c30b3de708f4914972ebe11be08e70e5407d7855069cf228e1db1891e13d38ccecd5aee3c0b96d61a9e83bd9f234cfab7136371e6744d40e0d48293180aa6664096252ff14b8e096a719f202692c0990cd1f776268c309848a6fd732faa6c4da1b670b7fe5aa50769d5c1fa1fbcb87f4989150438108a053f6f2ab97b27d3649aab2c79a41d42d75c33aade1a415ead94b36e5b0b4072a3d186f6d95a7cc04b4d991e7fb4b816929ebe3047584ee48f0260a91cd21a1fa35c4bb389dd10f2fc0e174e6d14eb4d3e9447612050a8d2bfc48cc6ebcbf77f2df04514250bf92869b56a081c401a66756f32c777b5e6da1c4e88c9499f6ee213abfb53513d1c8798af26f87cc10e4b777c3f03df462da023e05668b3e3c639ddb3608561c5412c455e874eff78dc31ab8882f7fbf5af85b81d3a732e8b7962d4924e9cb46585b9ebcdc2768230652643bc38c8a3fc260b9655a758136ebac4330c7fdf784cda047adefe356d04ef885010f8fecf8b387d7f96209a1ae8750a377cd6ea83ef013c4c4de31486c048c191785316ca510edc182ca9ac39e74458933a8421cc99f5fc43ae02af491d9d1e8775323a1793d05036df017c38d4e65ad309f4d91714c4b04afdf9c70a48055a156fb4bc974260c7558348aea938f947797413066336ee4f6f80aae23e1153a3fb86dbd0ea122584f21d07b472910e1f0c9462b3947f7f48dfeaa0036eff1ae76300100cabbba8d49fd5347510e64b58e45f6efacf88398843b8b5c7598c6f90fec34538c7a99325d805940e4f2f9e33385cfd8592c901764781592c803ce4da8ee2f45c24e8aa59271c1a2ec86fb43b2076006ed1c2780f97c70975d8a2a7df6b61ba819d7123e86872b67385d6c402167dc2721cd35eb54c4cf11ed6268f5b24c6009489b73c0be36fa164fb0b0d89a275faf63ed4f7651cbe51c99d75655dc314d9a4485f5a8f0925a588d5d55e35672e72a559b1f01e01fd5fb97a8389fdb4b8cbeef8d3cd4"}) (async) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') (async) openat2(r2, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x9, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x9, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x8001, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x9, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0xd, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x6, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffffa, 0x8, 0xffff7bfb, 0xffffffff, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x98}, 0x40) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffb, 0x2000}], 0x1, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x1e0, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xffffff6c, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0xfffffe15}, {0x11}}, {0x1c}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x50004}, 0x20008000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x114, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@generic="46f867bdaef1335dddaa6a258c2c2422964afdf591f27eda6aac8e9cf1bd728885af6789c80661f0416ca12c0ba3b6b5f28be6447b1d3b3c4ecdef306538dd09e93d9591fe746e058bbba4d9410fcf3e0b1f322dec2e11b8d86d4b0c89232ca3e96dd54a6b17d78bb09f0776ba83ade7fc32db274fde208a403b9192885fc7d8b296363c4490aca3c8460518c34a61b9cd619ddd2c0f6aab6c79fb84c6fbb6770105caeccc83c4db7337ef2398b9dfc3de4f8f34d48cb9059a45e2a0eccf49cb0d0d2651a989ec3c54c976b4eaebca1702b4197eece89669d073448f5b6555cd79aab760", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r6}]}, 0x114}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m0.147433423s ago: executing program 7 (id=1607): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r1) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x101002, 0x0) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f0000000080)={0x5, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r6, 0x801, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ac7e3f40500"}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}]}]}, 0x44}}, 0x24004000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7, 0x0, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1, 0x6dc6}}]}, 0xb0}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) 1m44.97976954s ago: executing program 38 (id=1607): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r1) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x101002, 0x0) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f0000000080)={0x5, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r6, 0x801, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ac7e3f40500"}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}]}]}, 0x44}}, 0x24004000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7, 0x0, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1, 0x6dc6}}]}, 0xb0}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) 1m34.49639626s ago: executing program 1 (id=1687): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2002) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000400)={r6, &(0x7f0000000ec0)=[{0x80000000}], &(0x7f0000000f40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r7, r10, 0x2, [0x1, 0x8]}, {r9, r5, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x9) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r11, 0x0, 0x7, 0x0, &(0x7f0000000080)) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '9p\x00'}], 0xa, "c51878255a8ec350792738e5eec20e6a06c7c799f86527b6ed28994e17e7fcf2c95ee38649da48705471ac0db8a4702810504572795b0a4248c27287e94ea7d12d06b479d53832ace530b6723cc1"}, 0x61) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',aname=a']) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x2002) (async) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000400)={r6, &(0x7f0000000ec0), &(0x7f0000000f40)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r7, r10, 0x2, [0x1, 0x8]}, {r9, r5, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) (async) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x9) (async) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$inet_int(r11, 0x0, 0x7, 0x0, &(0x7f0000000080)) (async) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '9p\x00'}], 0xa, "c51878255a8ec350792738e5eec20e6a06c7c799f86527b6ed28994e17e7fcf2c95ee38649da48705471ac0db8a4702810504572795b0a4248c27287e94ea7d12d06b479d53832ace530b6723cc1"}, 0x61) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',aname=a']) (async) 1m33.940898846s ago: executing program 1 (id=1693): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r3 = syz_pidfd_open(r2, 0x0) (async, rerun: 32) write$sndseq(0xffffffffffffffff, &(0x7f00000006c0)=[{0x2e, 0x7e, 0xc, 0xfd, @time={0x2, 0x101001}, {}, {0xe0, 0xfd}, @connect={{0x81, 0x2}, {0xd, 0x10}}}], 0x1c) (async, rerun: 32) r4 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) (async) setns(r3, 0x24020000) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m33.853564734s ago: executing program 1 (id=1695): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d86414a545299d3e3d65c47cec"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "114691e33b4fc97ec3c23e7dec"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0xff, 0x285, 0x8}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004480}, 0x4000050) socket$xdp(0x2c, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="b4d9b93c2cf905c79ac5d7752395fc737a8c02e39195ab6c5142c2b8fbb7e0ec3484a75112d3beb313bbeaa17f32278ea70a021095d3a7afaf40792f334cc469a4d8ac4b43b8b6d535f4c261f95e7d4d8ef0298aec5c2491320c294deacc8297e8d4d295aba2e9dc5dcca3cc41c98a99d8172e91f52f5bf8dd580bc0005af70632584b9d82ed814ad841b09cb1d7965b95718fca7b4d8b11f2b74948c1a7eb7d4a11e7cc2baa772b6b941881d97c3eb572867c914081728d91992190d6e0a091367bb83a5baa", 0xc6}, {&(0x7f00000003c0)="648c0ff9af1902169b25a2b1f27a143955de2bc720f92c35a126cd75d709f9e5349f2eb29d240d3d06e15c00ea929f741e84ddeb6595da45433718492de2eee047fcd8d903d11203395659bd929d5967c671be1eaefafffafad02455cedc9180d21d054924be89408a855bc4c5a2f5e0d785895e", 0x74}, {&(0x7f0000000440)="8996d5fef06eff3d8fb80f77b153debc1baa6e76cdbb4e60bc195b7cbcee53ae081723eba5baaa81f50236d5326eee7e0d7ab8976c677b4ef00312cc6a8007ef5e5504b393a2ed515e67d1fdebd429c454754bdaa6e83d9a039ff9d0", 0x5c}, {&(0x7f00000004c0)="dcec79acde93f9104e4f70a4996c525cb1228daae156ca9d8adb294d763aac495fd8bfecafdfb7593d2ef9b4c3bc7cb6a805da8440aad492adb0988f4420312e51b318614a85491e5bcf9404a61fde20fc7ffa78e9e19352cda7dc1cc37befe9ce6d4afab428b0d377e68c25f1977b5c0d4dea9cdff88244b0cbedc2cf6011f996c83fa6063ecfb075f8ac38ac8769e87ad099e53a293150792671954705e195e37e7186d5867e02f89c5754b2cc3b6919ce50726d9455fb8d496d64d80ad21a9395d4e69a6fd382e925948f7e11b862ce3b0bfab5805127fbc4b7ba328d135a2303b5ccca6a2b1b8e", 0xe9}, {&(0x7f00000005c0)="92ff910eaefa606599873a529d92d8970449b03dce9c00c08e925cbd728fc600f22f0b4077cd1503993ab88b425a78bd8f66efea4585f523558340a7fb577ef68e3fc44621760650e2df3baf36963ab9b51db383e8005177062d2c1f6aef6135411cb68dc4c242e3dc97105b111319dcc54e0b5b6a0d66c7a49358bebe62c05df640baa45c54eadb3a369a3d6511071cfbd2370d93890625f78a5a57b91558fcbb7f791310", 0xa5}, {&(0x7f0000000680)="58f8b9e4e9cbd6d7ffcd81951e1cf6665a11322a36aec69f48e529efd2ea60ce86bf191e7716213440176216ae5c0569bb9b7644dcd545463ddcdbe41eccec2ea42d0d2deaaf9752ad2d0cb85cc90c2f50835de2a7cde1bc04564b9c9bad881190900d21fc668f640333d1ed9745d05e56088778e155a14f4858276c58780b768e49e0bc7a8ceb43bce183ba498ff101a954e4398044914ef0fd546df8c03e8c90bdff8e98ff6a4b600e47b4a4767bbae385cd8c0e9e6737a5894777d75e4b2b1def6bc62309e831c3340593793d6e2077d6a85eab81b7b24918abbc7ef8b8481d", 0xe1}, {&(0x7f0000000780)="99e7af3698a2891a7c1b419abbf290d86b5ec6cbd87888df136d0e46cfcc1c070852a49c1cedadcac729923966a21715b47ecf7df6deed7d141995df47ed6400d212ca8a1b37cef75d1ce414f736939005033b13cbbc746f6399f8e5613de0260fc99714a64ed572ad5d72f26c74de822696e743da16168788f5ae465981d4d609196328c2e6ec2f1b0d335d980f9305bd53bb42313e9ceabce8b73df2ab0314c14fba7a5a1b72ba022d5fa5e662cbc9e20f1b6a54754352f65489a681fa7be0fd37ffc4db03577870ad8c08f7bbd98d9873a5fd4bf11df5ae04dc15411ed86a1ee735", 0xe3}, {&(0x7f0000000880)="c71514d81edabe7aaddd56ea0adb61cf757d618f40085a2f61eab9243e47183802f042731b0dcc5d172c3b18dd3e765de8aa90836c2479f7a2c66ea6187be88cfb71e064e51474fbeb87f76987e5b9d37a728d090c6f", 0x56}], 0x8, &(0x7f0000000980)=[{0xf0, 0x1, 0x7f, "3a72a0ab22629270c0cad6dc2a4c47f81f4b9273f9a20c2037e503ca07f96abef070bb959a3c67c653942062e6a39c3fcaea2659c74efc6de7115bac34a37e5c08588cac0a85cfb8ac0debd5be197bdbba1db12d0a1bdf87fb5a93554a47c15172d969efe0ea0795f75636ff9086ee5b03d3f38fb6797961c998602d9f1c0284da29dedc23aedef4031b27a0f325f9bf1d9904dcd5f427d8a8301cdfb43b7e63321dc896b9c0c0377ec4a8c3208e1f4fac239e36286a412dc7bde58abf0d5290e95c3f69e22f4b722f446da6fab08000abcbcbecaf2ca5633d4cbd118d210c3d"}], 0xf0}, 0x4001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008040}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x802, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4000081) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000ec0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000f80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xa89, 0x5}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x38}}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001100)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r9, &(0x7f0000001180)={0xa, 0x4, 0xfa00, {r10}}, 0xc) syz_emit_vhci(&(0x7f00000011c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x8, 0x80}}}}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000001200)=@tipc=@id, 0x80, &(0x7f0000002440)=[{&(0x7f0000001280)=""/128, 0x80}, {&(0x7f0000001300)=""/48, 0x30}, {&(0x7f0000001340)=""/222, 0xde}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4, &(0x7f0000002480)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003500)=""/161, 0xa1}, {&(0x7f00000035c0)=""/242, 0xf2}], 0x2, &(0x7f0000003700)=""/175, 0xaf}, 0x10000}], 0x2, 0x60, &(0x7f0000003840)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003880), r2) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000038c0)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000003a40)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003940)={0xa8, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4881) fcntl$getown(r1, 0x9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000003b80)={&(0x7f0000003a80), 0xc, &(0x7f0000003b40)={&(0x7f0000003ac0)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1b7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}, @NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x375}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc884) 1m33.795126882s ago: executing program 1 (id=1696): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5420, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000400)={0xa, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="830772fe", 0x4}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m32.633417592s ago: executing program 1 (id=1705): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0xb, 0x2, 0x2, '\x00', 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x9002, &(0x7f0000000240)=ANY=[@ANYBLOB="666478aef5b2ebbd94b55a3d8808583e5f3da190d498e5b76e4f7a1d94a6934d0cc235216ee61a0ace91c81264d8a34e3b6cd54604364bbaa147b519af0f2b34d86d274c03213779af54277f", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x245, {0x3, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r3, 0x401070c9, &(0x7f0000000000)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000c00)=ANY=[@ANYBLOB="4007020000009e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="40090f"], 0x0, 0x0, 0x0, 0x0}) 1m30.776373798s ago: executing program 1 (id=1714): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x11) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)='nilfs2\x00', 0x8084, &(0x7f00000001c0)='discard') sendfile(r1, r0, 0x0, 0xbc44) 1m30.408927928s ago: executing program 5 (id=1719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x1, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0) 1m30.244708989s ago: executing program 5 (id=1720): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904eb00027916fd000905010800240704970904"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m28.53679823s ago: executing program 5 (id=1725): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2000, &(0x7f000000b000/0x2000)=nil}) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000180)="38f1b896f7f76295b19a2ed2d57878b68a95500905fc855ebe1953138cb59c078c3d5f17cce6780c0a0ad2bd6ce6a67c0fbc19d15dd2c547ff5fe166ea9d01f30d7f0c886cbc13a8980142d22d", 0x4d}, {&(0x7f00000003c0)="f50984fa8a3bc1eebf7efa8cf1eb5f5ab4b961ff57c4abafff5c2e41406dfb9e3686b2562712a0f5d6cfabe820233e6a4a1037f039e4e374ce92fd1b0853a769dddab0396eca3182003d1bef2003a8ce5edd970e8b9e3e48c3195757e3b92a3646f92968fe5e5d474f898f45a82d23fb162aed1e65bae2032fe1938f9a1660fae5fb239db3f9c3e3ecb3abdf1135788942c6eda530dace386ffb72984549c01222910da35b9ebd46ab7475bee61906700dc37eb946817f617956655345e3695f1296a09887a79ba57af9345cb58af34dc429ea6d86eb654119fa354df8d8305435eda398ac682534dadb755d2d311d9227b766a09f4e282efc74e40c70c3a0098afa4f632b528c5d5c911be708555460cbc402ac22d5a28afea44637e37ab3bd34194cbd1f4bf165727b531c793373a6d73e7f7877b74ef1d1b86e7caa76b444fc3319edef6a9f577a365f45e627b074e6b6b9b2477ecbad57f5dfe0f22b658f0d6c0abc00121bb1bc61d4104db640d46291b31be7ba0c816beb00aea9bca010e068ca4b5fc7c63ffc595e26e0c33e046d7526fb6466b4fc62732cd99f6533dd01ddcbb12065fd446d670a39385f80b77cc356a124f53c2f63de3275904c6f62b233b1fc7a825a6d6d87c3214778f04caf74a49efb1d8c79424a3ecbe6ce7c469006f4647db0efea8947eb0f9d7dddc7aadf34023a5a6734e276e3f711b3df83a10685aa1a356178bfe0384fff6211d8fb4391465b8de83ef78a64f15f810cdff51cce07a8a83460a452b7d2ed7f823ffa933019a49857fb704539c00220b08362f010dd4b3cfe4d51b21e5819ab6ac2c308bc85aa03123758bd098d9aea26a67e6ab043ed086d8a2c5282d1cc51851a486e6c6180acc11b0deba3147d4854765b14e7da2d88b0e25117d321d1e726ea2118590330423c94d2fa746679882d1cde1daf94c596e8b53a7d634cdd473492ba99ec57505fadc05dc5beeef36396c6b0a52c54ff813c8bb8f224dba2b447868d9f5117b75d868a4e00175e37a772d647d3125798bf01792ded2a50015e58bf0c7eab253e4ce85ee6fbdf31595e8fff59b88290a0f8a013a95835ca111824ed4720bfcb2c9997dace25347d3269c1236f9cdb18edf63362382ce71a7b53ced008e08954f20ee94d5ad99fb0ab1dd4b82d9e2cdd81c9cc32d7e5a366f11fb2d73ac890af2b746bfac235be8f1cbab4f4bd126ce8d737606fc973a412e2ee4bf16a8017d3198f926b2f7289654c7f0fb933952b8cad7212349661071c48f1ee2bb4da8d5e927c79829bbf937d97862b221e3a06486ecf99b6ca323f5b8d2afd13d297d0f613914440ab1a5e557742d641ffc456ec696b106a2132d50ca43338f85764c1140f0c03a877b9a1cd9742c528ee57eab1df7d9d82e3ad26f72276abe04c6dce77be4cbb63ed59c6c9b6353b599cd72fcc8b3b9055c5f1341891d9150bc3af59a785dc2703f1dccdc517807bd620f91d3a4d8707046292467bf523b57198143ad7367a7075ac77f7cde8f7995fd7fd450604e1f9729446e83d2d88e57e9761a06637e9feafa9bbddb51ad1a354debf73aae48ced2adbfa84bef12e93b0374e59c776c07558f92e640493efcd410e3888c07b4df037bde64577e5cebf094d64aecf24046e8279cf210a3cf874511bc4b7d89b90c9ca34ba18ad290148ef2bdbc0b04c8107f273d4bfd946b3d07b7e83dbbdfe801b70922deb2ba7fd5d1fb06c26d7992b861e55c5475255f9a9930c3e3fee9cc0ef54c04bda73b4be2de640475b1bf41b126f7c5813a0804f9389fefb02940da702f6e050a6a411eac8f6f3882f7f2b39fcee1a84df287b279fc6b1f0045929c268dff615b7707a5e0608767211d497d311560479f17d2268fafd44ab6cd29637f39d63d7c7f82c40b6a5dd82238352ed40df6d7478419bbd883e371af2415ed7fda808de86eecd3fbeeb749d8ba0447c66bb4f0f78b727b251034c136747bea922ae84e148e05762bfd621978d7ace649b4a105d96f095b986eca779423099f13746671c36132aefcfae1aac74e24d078b8c00f3493567ddf6060198c398e7acf0d16617e7a2c891a53bfc9557f54d91ec4be31c9238aab6b691b5dcf8d349ab5f1c7f5de18f4444255e6e999dd16a16428a1353c972f9e0e14b214790c9ea8ed1dda2bcb3a1cb7d636521cef1152651e8ad103fa61ee7e82cc7ba4a7599ea3ba31d20ef90845bb31ff72b730513652c6be09898e24eb33f87f5606124f0523556f4032b7113f4ce49476b13222b1f529ae0f62aa07e2d679a537d0d4eafbfe34205d0a28c091bb1c94cee90c2781e85dbee84d6a49d6f4816dee491d8d9274c80c84e968a6edbdd24ea1786eb9dc12e1fcf257bae31d8f0c196d4669e925cc8d63091f99bc4797a381e4e48e0791a98a1e10145d251e4cd43ad6e8d56596e3a32668785b23a63fa8d2e545b5f39585d04e9ffcb1c7a9196d2b3738456d2433dc8aa312894770769c004f564ac1dd8b72dd9eca0671e87b89540232572396234e177442c01f27442cf0c26e1f7dc4bf28045b16295f9559cf9e1e9fd8cf09642c27adbfc6a4d1b4408dc33e1210ec47159f9e26742e57d05472c366a61a1d354802b2b730b970ce026c83dbb7c180b64a5d34c16ccf163875847426da830d222487b319dceb268f55e8edcad8c79e8bbd15d89b0ca0830bb787a3df2e9eb3b8765d2043c471efb75518c51f56570ac38a284423f13add7d5da6895845981d4b5cb82a6ed74da728e969f19f8eaf17f9ca744a5093b378102b96f39418a3e511740aabf88339f90a2b9b74bfa2d9bd5d5f68175ff3cd9edb5fdda41bca21de37b0b89cb47ab73dd516df34b01ff2537de88d908c81929318e56687d3795450f10fe94f622b4910d5667afed9808bf40edc0e16b8d6168d06a48d1a4ea7adf893bc3e75d98045e8afbd7f57740f2d981838da5976e341504d1d5bdb82cb56aba248ed856c4f78729a264b5c5d43cccb816de947ef5e50578ee2c470fcd8567a6dd42478fffb8976fc7ed79163483ce82bad059bad7bbb59a94bd19d8524677b58cd9f24d1a3425bb50b2a3ed42064f17a667fd6ae78bfa5e836bb2ed75e6b8a5032da5b0b353087b201c457cb8af79d46f96c2ac476ba2420ce214ac68a7aad4c2a278e6321256e94a4fa700fbb9a8c42d05c5816425a2e8a6819d4924d354e7559e4518006d17b7119f15612d5a644b024a3105797884649fe8415ae9935bed0e0f19d2a38d93a36aaca4b05eb1afddb0f100dac874985f5104d53d44f177fa725347671dc7c4635e989d2c0423d23c8e25c2b2791396f45cae4b7acd1335174a2ebfce2be53b7fc4d6cb2264498d22e7fe7a79bee27e3fbfe387da380d9e01998d23c080e7594847fa532906aad1592722f3a925f80d3368a9d777a2251a104435ab552525d6f9a271f0faf9600be80e85bc5a90ffb12b027ce80e4fe4daa398d19371757e98db844ba86e6a8df21d4ad679bc7ca5b690d4685fb324e8819b1ceac85f7af9d498a09bbec239e28f65a61f2c28b03a431161c58c99e9e7f52f29ff0a01c88221183a32d393af94808d8adae0842bad44ed91793599baae2e191785f11f7954ea13fb3e023944da12f89552b4220eda0e955cd9e6e53a9c03c61e5bb0880d68043b180950d06adfc74df1f4c947a3f7b4796138da5acf21074d4817f00a5eecf0e76250fa4c79f24a149f233687e75517c9d52d5303b7aa589d207cf59d2d4ff0d5a66ed01fe3f84e8bc27bf9b022e8b7c490199f3da3e6340c1c0e7f8cae8383090b5e2017697ca69d9deacd198a3a2aa8cf60291caf641a2f77e7dc81511729548fb842bd4a1c9cf0822c5088567af78607cb5a76f3d134cf5f9266797513147d7d4e7f9436f36b3c6c76a5a01a30946955b9731008b1981b3f996c465cd6f693c405b2cfa038fe9b97276af18dc2e0a484ec20497a673a83ba2f8a94d73429650ad7f5ed4934839db0d932388a1c97f7f510eb6be1eeafd49b0e39e73564c359e404d9e29fe36130cbe3dc15adb051aabdb55274a3bfc71ceb360cc9b5baaec519779907b4336d09987a1d6a82e2518fcfa3aae3dfd5e05923b8f5d9157af881767addb1b56687098e2056be11c6ae41d97cab14115af2c1df0ae21678e64c155d2e46a3617622c331dfc1f99f4478e0b856d8ee2b9f93f0cb5cb8f9ffc5b9ef7e9b828e663d86022ef1619a63cf57e93717927acbe91d367ea5edd070b0c23f815bf46120c52a5bf2533c8b7283477d2655c521b95003af7217cbcac5f12a36da46b46d71139aa7a1fcf3fd460e01f910ad1302b47adc976d2a99df70259e65ef2c5a8ad66c85855a34ec06398ec4fdcd698a1ad6cad0a0887839ad325fb43892b4d2254d705456f4c736e9217876251e719ec3c994128b30d5e5a497cec98bdd90490109234d51f7ccbb3877f9a8403f4e1053b6e34c848e899996be6cf54cced1ddefbef2cd75abd8db03b32310555b5d5f184eb82ca5643fa864261602c64a2a4c16f4d8a7e4b6a851850d2d60ad4d388815c568c46bdb22e920e6902cda30b2a352e175b3321301e49f4e178f8f1cd29f3938bedba77e238f8eea54a4fe57073776721974e0b177560fb9277453582198984755d1476a71dfeb0ff58c52db476c2e9e60eea1993f315505f099f997046364d18c43118e7e7d4414706290b1536a5e1e506a5ec3beb2ef5a67aca5304aa24e5b0b3be518c0ad611a4d0c424b4cfec10d41073c162d1854ddc7c80af206c4dbd6e68b94ef610d93c0180c3a2ad1413efbc830aab39ac7726778734d77fed9c36943a607818260936da15fb217353b59883a81fd5ec1c224b35664eb5cba3cbede6ec66883e5bf1068777cf45a343ffffbafe8f8894154551477c0c07c9d9eefd6bbf5931ac3720640bcf27a25e6403d4833725ce6f88c6c03371ffc7edb968227c1cfd7eb09dbf91a47980609fa84549fc0c86ac7d4e1a15599967e7a031c48d065db54ea948ecef6063dd2829fc5fa0e6a1803272c6b7f2f88d544a9b43597ce3251bafe5238311bbfdf17951992c9a1588e7103ef18e1136b5999a844cd35473c86e904b18f23a01da62d0025acc31386672d38544c1fe461ca3297106eb81210f07a54e1f8de4507fea251a67436ef708d2d91e25e54a2c1121de73ed3f5b8d85f9ed44c7a379805de627ad188b030eec9013b6d899921329e2c1ca24f112458da0976986ef583688ef79f2fdf8a2e33c4ba30bacfe189de9c9b66f8f809940e3b18ce6ee5ec24de029e50c69ea713230dec5fd6fce900e9fc32c8353af62095b801e67f8f4bd9f983eece5ccb5575f4367bb0c70d8f1d2a9cf3636912d20ccb662caa703807b75860e1a9c71a1020784992fc3c1a9cfb57b48b0a0bb48a63d3d6f325114c51105c6306f64c06170d826464bce2f18648ab4efce93452cb887cff0d95927e0336b869b1a1dfba404fbc1d38615ac1484a1471ff4e99bef318e4ced29f183f5b1570b4a67a043f0d1800b28ab98537fdcede0195a7b50a46c232821bab0f2673c40452c370529cf2462337235c873bd49e44ab0ead1d20e4bc6bd3e1c1e9cfa3e72d74ea791a635c522c94f0378eec4bbc4b7380fd640ab570bac7b41c3e4d8ff99619c66ca736f3d1c5", 0xfb3}], 0x2) 1m27.874082497s ago: executing program 5 (id=1726): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000041c0)={@null, 0xa, 'team_slave_1\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x202000, &(0x7f00000042c0)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r4, r2) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') close(0x3) read$FUSE(r7, &(0x7f0000000300)={0x2020}, 0x2020) 1m27.730653403s ago: executing program 5 (id=1727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b14, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="166d656d6ff34c55d876c92f25204cfe80656afad963d1d275412fac0f7c5e912be8ced79831e4977a459dbfc274830a8132407b50e01dc1690b8e51adcfe25a7f6888fbef7f0ca830f0bb2cfc"], 0x10) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000003, 0x80000001, 0xb, 0x1fd}) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) (async) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x4}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x200000000, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2, 0x6], 0x0, 0x240306}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m27.344811244s ago: executing program 5 (id=1728): r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x2040) 1m26.975269927s ago: executing program 39 (id=1728): r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x2040) 1m14.623900342s ago: executing program 40 (id=1714): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x11) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)='nilfs2\x00', 0x8084, &(0x7f00000001c0)='discard') sendfile(r1, r0, 0x0, 0xbc44) 46.114215312s ago: executing program 0 (id=1912): syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) 45.290498539s ago: executing program 0 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) quotactl_fd$Q_SYNC(r1, 0x8dbd21d8df17c9e7, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000b0a010300000000000000000000000a140000001100010004000000000000000000000a"], 0x3c}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x40, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x30]}]}]}]}, 0x2c}}, 0x0) 42.531389875s ago: executing program 0 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) socket$kcm(0x10, 0x400000002, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x200, 0x0, 0x21}, 0x18) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x200, 0x0, 0x21}, 0x18) mknodat$loop(r3, &(0x7f0000000280)='./file0\x00', 0x6000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000300)=@conn_svc_rsp={0x0, 0x0, 0xa, "458699c6", {0x3, 0x1, 0x0, 0x2, 0x8f8}}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r5, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x14) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d40)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x7fff, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x3, 0x3}}]}]]}, 0x7c}}, 0x0) 42.234364703s ago: executing program 0 (id=1932): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x84}], 0x10}, 0x41) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000800)=0x800000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000002000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="632ee25fa1ba3317bb82cd4c2a2f0dd0fbba1a271b201984f26931b922b292f6990abe0a2dc8485db5dc6365f3188df780eb4e81069e141367457f0b34ae63128ff9ba76f7cf58cf4c7a7eecf5a187d3fc695944f80707df34e82555341d81f59fa1d565"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000001000)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc082, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xec, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x30}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x8, 0xfb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xb, 0xf2, 0x7}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x1, 0x0, 0xbe, 0x8, 0xf}, 0x14f, &(0x7f0000000400)={0x5, 0xf, 0x14f, 0x4, [@generic={0x54, 0x10, 0x2, "6a43163f03e705d5cb48c92ae79b5438c3ad2a309f7f88237a8a7fb78575ce0346086e162be4327afb806e89a945b5c6160978f59e75ac1bd3eb385795a363fb651f2476cc3797879272ac7bb4dc8d45ae"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xea, 0xf00, 0xc, [0xc0ff, 0xffc0ff, 0xc000, 0x3f00, 0xffc000, 0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xfe, 0x10, 0x8000}, @generic={0xc8, 0x10, 0xb, "078de5c9ec9fb344ba395e2a69e8599ceb54b467eafc5d10cde87f69d9e547c159610532f4c7cb334fd84f4012ae136245f02049f19bb5acba3ae9bbf3fcdc6485e2e567d46fbd791f2a99f9315caa08516a43c36dd0e72f8e6a5fd02fcfce66e2d16253ae90c4ae7dda53309d8b9f20692d66035e93e4c3b1a807ae545026d98f52c979cfa9182796b0c96379b779172dd47c10364d7d8868388af92c7fffc213d077ab4c7c9b425eb7c5e57f8593526619ef2c6560aa0090543153580b5bc6ff3e33c093"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}]}) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x810, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x7, 0x99, 0x1, {0x22, 0x52a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0xcc}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x101, 0x7, 0x0, 0x3, 0x20, 0x7}, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "694b51c8bb3b22400ff4502890d2cfda"}]}, 0x4, [{0x65, &(0x7f0000000580)=@string={0x65, 0x3, "7c15b1873ec294fcdd7538e8a0d71a32d74c57f67e07ae3714006b381aa874daa6b29bc0b82bee5d6c12f840cd1bf57c7213fdebc2bf9c4dcbce871d97be97e5086288f9487df738d96f1a24a674e93d7981492de385d445f41dc52cb9b286220bf069"}}, {0x2e, &(0x7f0000000600)=@string={0x2e, 0x3, "4b9620f004a8d96002001e2d52816de541ec709d6642b1fe88c40fb0f631d1baf7f7fefe26bc176403e31f83"}}, {0xe0, &(0x7f0000000640)=@string={0xe0, 0x3, "542895eed4aeb13319cb07e043a2c0f042e37840f874ac036ad7641858c180af9ad1f6c732705813854d2c434507ec7db019465c2a8470aa346f5949fa3688fa3d45049c7c782a1d6c92d434c9c537e5eba94eac177ede24ad48e44c23b23dc0d30719ca19596c9ab956f1cefb4add0c1c8daf336088767c9c073a8fd1b1d7bcc559887d8a52e39a8702be7ce561ddd7de06e3664d0a7cfc226b6b60199b0b5b8ce80c32626d341e540f57d6ae94ca6ef09df1a816706037668e20891eaa12e071ef538648f823851f8bf609b2666e7e01c5f4e0d8fd305ed29ea732c86d"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x822}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000013c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="2001050000003e4d"], 0x0}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="9418e7b73e84", 0x0, 0x3, 0x10000, 0x22, 0x0}) 40.612476977s ago: executing program 0 (id=1937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) fcntl$setpipe(r0, 0x407, 0xe) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BLKSECTGET(r6, 0x1267, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @local}) 40.534491706s ago: executing program 0 (id=1938): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xff}, {0x0, 0x4}, {0x0, 0x0, 0x10}, {0x4, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x4, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0xd7}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x1, '\x00', 0x3}, {0xfd}, {}, {0x0, 0x4}, {0x5, 0x0, 0xfe}, {}, {0x1f, 0x0, 0x0, '\x00', 0x9}, {}, {0x0, 0x0, 0x5}, {}, {0x7f}, {0x0, 0xfc, 0x0, '\x00', 0x2a}]}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r4, r4], &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r8], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r11, r9, r10], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b80)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000c40)={0x6, 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r15 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r15, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r15, 0xc04064aa, &(0x7f0000000880)={0x0, 0x0, r16}) r17 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r17, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r18 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r18, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r19}) ioctl$DRM_IOCTL_MODE_ATOMIC(r17, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r19], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r21, r20, r21, r21, r20, r21, r20], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000d00)={0x200, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x464, 0x40], &(0x7f0000000c80)=[0x0, 0x0, r4, r5, r11, r12, r13, r14, r16, r21], &(0x7f0000000cc0)=[0x401, 0x100], 0x0, 0x7}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 24.370583821s ago: executing program 41 (id=1938): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xff}, {0x0, 0x4}, {0x0, 0x0, 0x10}, {0x4, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x4, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0xd7}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x1, '\x00', 0x3}, {0xfd}, {}, {0x0, 0x4}, {0x5, 0x0, 0xfe}, {}, {0x1f, 0x0, 0x0, '\x00', 0x9}, {}, {0x0, 0x0, 0x5}, {}, {0x7f}, {0x0, 0xfc, 0x0, '\x00', 0x2a}]}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r4, r4], &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r8], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r11, r9, r10], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b80)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000c40)={0x6, 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r15 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r15, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r15, 0xc04064aa, &(0x7f0000000880)={0x0, 0x0, r16}) r17 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r17, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r18 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r18, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r19}) ioctl$DRM_IOCTL_MODE_ATOMIC(r17, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r19], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r21, r20, r21, r21, r20, r21, r20], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000d00)={0x200, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x464, 0x40], &(0x7f0000000c80)=[0x0, 0x0, r4, r5, r11, r12, r13, r14, r16, r21], &(0x7f0000000cc0)=[0x401, 0x100], 0x0, 0x7}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 15.103805695s ago: executing program 8 (id=2031): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00500, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)={0x0, 0x104, 0xc}, 0x18) setresgid(0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000140)='./cgroup/../file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="af98d0d384e9"]) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, r11) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000600)={0x0, 0x200000000e, 0x1, [0x334d04f0, 0x3, 0x3, 0x7f, 0x10001], [0x8, 0xc572, 0x5, 0x8, 0x3, 0x3, 0x1, 0x1, 0xe, 0xffff, 0x5, 0x8, 0x10, 0xc, 0x1, 0x2, 0x2, 0x9, 0x5, 0xfffffffffffffffb, 0x0, 0x0, 0x200, 0x4, 0x69, 0x4, 0x10000, 0x2, 0x6, 0x1, 0x8000, 0x6, 0x6, 0x0, 0xfffffffffffffff9, 0x6, 0x3, 0x2, 0xfff, 0x9, 0x7fff, 0xfffffffffffffffd, 0x5, 0x8, 0x5f6, 0x8, 0x200, 0x6, 0x6, 0x7, 0x4, 0x5, 0xa, 0xd4a8, 0x5, 0x2, 0x3, 0xb, 0x10000, 0xf, 0x0, 0x6, 0x8, 0x5, 0x8000000000000001, 0x5, 0x4, 0x64f3, 0x62, 0x9, 0x5, 0x10001, 0x6526, 0x3, 0x9, 0x5, 0x0, 0x0, 0x9, 0x7, 0xf, 0x6, 0x2, 0x1, 0x1b, 0x7, 0x1000, 0x4000, 0xffffffffffffffe2, 0x7fffffffffffffff, 0x3, 0x8000000000000000, 0x24, 0x1, 0x4, 0x8000000000000001, 0x101, 0x80000001, 0x9, 0xfffffffffffffff9, 0x3fd5, 0x1000, 0xbd4, 0x9, 0x100000001, 0x6, 0x5, 0xd4d, 0x80, 0x2, 0x2, 0x2, 0x7, 0x0, 0x400, 0x6115ca83, 0x8c0b, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000000a40)={{r11}, r12, 0x14, @unused=[0xffff, 0x101, 0x7, 0xcd8], @devid=r13}) 13.50909376s ago: executing program 8 (id=2036): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000cdbc0)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0) 13.228311988s ago: executing program 8 (id=2038): mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80004522, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x86dd}, @void, @mpls={[{0x7ff}, {0x1}, {0x101}], @generic="8eb3cbd54fc9c0aca24e14e95f0916e9fc8d98ebb3ecea11af43990966984fe94b34b5a836d35e38147b12befb580831356977cd09f6ee83270b9f89682a7600932b98055c10aea847e1a7de44aa1051333c30f9b8004a0786a593a6e46ca9333def169fc1b224d86af8734b5c59ae0e538745aa2223f644194a9ae78d1bad577ac5b84f7c5234548c8d250a88c81d92318b3cd322b1dff1d67724921f73ce21f75bc69923670d8f8028e52dacc1b3ade905e0e7"}}, 0xc4) 12.405306489s ago: executing program 8 (id=2040): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000001090200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x40, 0x3, 0x1, 'X'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000011c0)={{0x77359400}}, &(0x7f0000001200)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001e43b9d103c41868164e30102030109021200016abfd0060904000100c7251693abe8447234bd7322a2e93b6f4ef5a0328a69cf524c5093f00c9e5448a49051ab10ca9ccd484d090391780b40d408cdf3c81040fc7a1ce06b53052fd29107b0bd822cb6db5ab99f6378f1e277450cf8a75fecdc58866b816f7e17158a72cba78e9cf6d50b2ae9d95258d0a24a130326d19158b88e97ff5b920a2e8a8f1b8bba9036f1602506a29bc96551d5986d7e3cd88f098558cb58d6614b53114b87bea400"/205], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000008000b4000000002040004800900010073797a300000000008000a4000000006"], 0x7c}}, 0x0) write$UHID_INPUT(r3, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 11.276508488s ago: executing program 9 (id=2045): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000cdbc0)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0) (fail_nth: 3) 10.711799898s ago: executing program 9 (id=2046): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 8.113759191s ago: executing program 2 (id=2049): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = landlock_create_ruleset(&(0x7f0000000000), 0x18, 0x1) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 7.880658341s ago: executing program 2 (id=2050): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800060000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x7}, 0x16, 0x1) 7.778589054s ago: executing program 9 (id=2051): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 7.416714448s ago: executing program 2 (id=2053): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r1}) mmap(&(0x7f000063a000/0x1000)=nil, 0x1000, 0x1000010, 0x30, r0, 0x5fefb000) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f00000001c0)=0x7) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.250430281s ago: executing program 9 (id=2054): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000cdbc0)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0) (fail_nth: 4) 6.923536888s ago: executing program 9 (id=2055): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000)=0xffffffff, 0x5000001) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x301a, 0x4000023) 5.378235331s ago: executing program 8 (id=2057): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x18200, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0) 4.81681226s ago: executing program 8 (id=2059): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x1000b, 0x4}, {0x0, 0x2}]}}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xad, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB='\n'], 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) 4.229031071s ago: executing program 3 (id=2060): futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) 3.886022163s ago: executing program 3 (id=2061): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x40) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_0\x00'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963efbeb08ab473792a75e82e22c26fad70", @ANYBLOB="9ebe7c71a123a6fb03cec931f700677e0b126f1f5986ccafe71c1b550f2ad260ec946ea93eebe89a41706be3379af67835b11def814f7ac51b52408b99ce20f30f9aee23926ed84e39a3ff1bf195c5226d69b99d06e54087339373adf824b4fb718af0fe0471186a576891d89c7643972071b738f0161048d2a011c751ca01a8c09e4efa145d0b130efac60ffba07796e33bc7a6027e8dc733e90027a769f2f0ec0093560ff3169887ed13d836582bfcb68c03cd1a47c4dfdcbe830da0e8e1948e245970d95a7154134106b80957e0d03cb91080f1e90b3b91c644fe5564e6946d9645864388374fc644c20c7749064cd80a86b1dc32821c6d4ac4c408993ebe2c3668871ff0fae09077346d84ea4497e56251c233e5ac203b558ca87f0064a2e647b4e5c71402763ba81b7c82eb00b9b36d9a65a9ef09ebe37d453fa989d5fb29eaf4686e5ad112762b03e5ab42dbbd03d376860e2d2925576eab67eaa5b5fa3ee2c431430480e24ca63a8964e1f91d9ab6da5128b8432f4eff3e0f8ec95fc2d04a48f6f10759c61c5566e6d613f685529eb5a2b87e4da439b59800612f38119253c3863222e0c9dcbaf12376745c877471d7a2bc243f516138433793c0094093e13ca3b834137b00b4fb8561474c35bd63c92c50bffa8ebf164c41fd5718b70c7da8dd79a830736434faa517607e97a3812956c3766e46d309a24912822cd77059f900159f7e58c0a72ec60932c84e1ad75e2dadbd217dd60d2937a561e4a887a312dc77a65fd7962484ae6aefaed551b85ce65770fc0b0a5a4f89941cbb8484c38af83c2fea123cd48af455b99fc0c14b186b16e61c73bbacf294e53ffd7a7b804417aab4282cf420a0a3685224c00dae021eb810b467ff68fb49b43742e5b1095f183c1053849fbae276a984419474ed39ca456ccd74185de100b4f607051f40c1471090cd864738d08a952752a67b4bf0ca6c73a9135c5068ea472b70ce126470db14d48f96b9f211dfaed75829b14a1a2cbac87de61c127b4c5063ef0dd40c5ede8a5bd20988862648e274edfcf3d424aa5c0770635d655ca10f09506a9837d73849d90ef533e6e2d9a13d7ee26474261448da7e5a1743b5ceaeebc65672734738881e1134bfddc6328f86312061972404c682e1f09edb22d91351831b6b963fa06e8fbfc250cc66c7d29b69938f0a75662abf4b585d0199928d9377ccf629d3385b10c6adebef1a767f2ad7e2ddcd4278fd56d5638180c920a3ccf50b08c193c932bb86f0101be47e35b5f1f5534b6f080845fc3602e5fa8bff7f806a7e6855a724167e43a01c428d428fb40bd996c6cf743ab524f5f3a0bb2f4b219188407d34ceec56f6ba97dacdcc41480b85edb698945704de95f8019fa80e992974fa400c34138e993c83f8516046e942ab89ae165dd7000cbe218688781a867f4fb75a57cd3dd04d1e4e88d3166c91c5db6fd9935d882a6f2d771e7699aa7e12c4a018df495b567e0f12c91615fb2184ba3ca098f783acd14b0c1ec489a73e3e9e0a759eadf7f646259981393a91e8279d95ed0216ddd593ccf215794aff73d9ed880b8a05a8170bff8bc7a2c556e192a3555780f57d8e9dbb1427c0d763d25e86f0a9ba1f5c2e6c87052f330f52a146c365a8eb3a2ec6914a60a5799af13975b9de44ab37f358390b8dda4f459f3f42b697d36b8e418a39f092b127cc400a2f8b1eae70849c66a9459596080e540b2f3f8a5e36448254555eb6e08e040e27fa14e506f3a9e7dca498786eab24eaa20d16adc485780288a7f71d84ac48674c08826dd1bfa72a5e48448fab1cafcac101cb4081c6ca76502d9d8639d0fe863aa3294c4bee68ed1fe4623e56cc4df2d42f5cdecdd2a7c64272908b5f197a0408f590191b2af3ca8c34577254003977a33112c3b4d1a51d5b53ab823b90438afc815e75ce36dc25d20979afcbb7b7c9e1d74e149c536584032f4fb459758e8cad5406eb8ddf9e07b24d7a8247b646098434f5abf5703c004dcd47aade4385936d0ddc0305177afaf1165db02778140385c8802e456e6a834bb53aa42067e3bc6c366b89cf2f7c55ee75290b093052a323e8fcce96acc75a00e72a0eb53ad5035f14f1d35491f1cb72647142341644f5047b4584ee0e39a51dde8992046e2ba55521766c55e99bf64628c339aac63cfc72269e493d46f95d4f533be54adb67d05b4941497450b3206d0bc4785305124792c091dfe4df456ccbb5dc64deffdae71b482a9deb02e536607ef689dcbf606346b47f3f2f7801f4d64b55defacc1bc0f7f3e86d1a810e766a79a2345551fcd450d8f038092bbf079400809725656235dba67766f3e5afbb03134119cb6e70af106791a68385634ad9fd599947d15d8448223e6b49a26733477366c8e318d46eba0aa2c9061cf44f8dbe08732a727788dd72518bb84b17828f4a400246e5bdc44f108bc309c5ac0af2aa8950cbe1942401aad8a688b508f6c688ec5a42c58c7749227a99be8ec0b85cbdc416bbcf077e6bbd59892f260291df286c64e2490e6be70bb849d8e42a253036bb74617607462bfd444dbac2e25f0794e9d2ee592f73009bd4a07fb9d20776cbc1a50758143941a6a597d28dc62110632d4b0f02ea7df532f6ee2263046ddd579c7a352527ad6cc92150ffd7a2603c1bdb01fba997ddc2c2346934e5f85fa30800db0454d837787a243c267118dfebf63fd76473573764388545389bacf12e949ea132467379a5a180acd17750ef7f306fad9a804801b55be6f33defc0c286f2f5a15926a3d1ef187f7000e241c759066dd42ae13b595f2b87edde1dcf1bb2deff9978d5716a1955fb19a3a8cc5e576c2cd10611eb1859f755cd16c5b656c30e32cb9ec858f98426267fb13988b2ceba6dec8ed0d38c46ebeb9ef89aa94d4619cc8ccbc5067aa1539588785439199b5942c4a5b41a2a2e28ccdaf9821ce34732a39f0cc35c8e88f16e28327184456be80ef6bb4b4e18b4872a93a50b33e4009af632b93ba73f9e6b9e4cd7be5a4a96a191464171219ad30b135e96f934f1b4780125dc637af326040ca8b9e706656b688054e1169b6af70959081b6cdee494c85a1dd73f5b737f8ed570471dd10c70241d7b6193a9ba2d24e0b025d36b273bd40f697ab6413ff59dc800754c652a3c29264af355fbf3a9df51889cc0ead6c8d99e93398d1616ffd7927ad38ed9d32ef4f7ca08e98482d2abfc7f9f06", @ANYRES32]) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x40) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_0\x00'}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963efbeb08ab473792a75e82e22c26fad70", @ANYBLOB="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", @ANYRES32]) (async) 3.780738778s ago: executing program 2 (id=2062): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f00000000c0)=""/83, 0x53}, 0x9}], 0x1, 0x40010000, 0x0) flock(r1, 0x2) (async) flock(r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r4, &(0x7f0000000100)='./file2\x00', 0xffffffffffffffff, 0x0, 0x1000) (async) linkat(r4, &(0x7f0000000100)='./file2\x00', 0xffffffffffffffff, 0x0, 0x1000) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r6, 0x1) close(0x3) (async) close(0x3) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc822000"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.185126932s ago: executing program 2 (id=2063): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x8f) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount(0x0, 0x0, &(0x7f0000000240)='romfs\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x100002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x37) sendto$inet(0xffffffffffffffff, &(0x7f00000006c0)="8600d462a5c27895913e9c4facf31440b522e18541655f76ae8e8c03f5db079da7d97b4f0000e9abdfd3b656f19f8ff2a402000098f90000000ad20c7565cbec88a83744778738ac0a66368d010100008c65d923073563a0fed832a76861e600cb12d2c444185b36256c5320f58279322500a9b951e05bff79872d2628f2e62a45df6bcf8b30bf95ca09514ed5973ac9379e93be45eb64303687ce5208435521d5024c741613699406c883d545bd077f1a9b985e8aa67cf447f00db26dd05191e3111b653d131b3f3faee9324c6498ab", 0x69, 0x8005, 0x0, 0x61) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x1c1000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f00000000c0)={0x8000005}) (async) request_key(0x0, 0x0, 0x0, 0x0) listen(r5, 0x3) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x40000) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e130100c900", @ANYRESOCT=r5], 0x16) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fsetxattr$security_capability(r0, &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x4c4, 0x4}, {0x4, 0x3ff}]}, 0x14, 0x2) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000800), 0x80000, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0]) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x2, {0x0, 0x208000000, 0x9, 0x2, 0x0, 0x1, {0x1, 0x8010001, 0x3, 0x40d, 0x400010000, 0x106, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r8, r9, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0x6100083a, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) (async) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000240)='./file0\x00', 0x8c5) (async) creat(&(0x7f0000000180)='./file0/file0\x00', 0x8) 2.80129019s ago: executing program 2 (id=2064): socket(0x11, 0x800000002, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r2, 0x402, 0x80000024) (async) r3 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x10c) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x27, 0x9b, 0xc9, 0x8, 0xfe6, 0x9700, 0x537a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xfe, 0x20, 0x2, [{{0x9, 0x4, 0x11, 0x9, 0x0, 0x17, 0xae, 0x9}}]}}]}}, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) syz_usb_control_io$sierra_net(r3, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x60, 0x24, 0x9e, {0x9e, 0xd, "04694238e6215193855411d68c15affd05066b0173b23de10e7cddfb0b93fe069c6fc84ad95413ba77f9d680d679026dadea17d448f21c3f371a5c776d969b0a7f5dfa1c518297a89696047c86db12b1de6da6fbd73ca43258060ead7bd6afad4037fa8eab5298dd321179ccdae3b77fd8c9f8d0053423cb0afa3ddedf73d807f2b3a22f400e554bd0d61bf1e1186ab08693cfb748ed9fc8bee48cb8"}}, &(0x7f00000002c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "a911b790e17ce40ffb6832f8999ae2ad4fda964e91f4bf051cc129707e9d6e0523255df0dffda399681f4f2f3a65bbdcf1f0319f59fd6fe60582ba100671f91aca9554c668bbe2e8e979e65d25436aa6623212230fc4ae057d2203b67e8186f32623205813db4bbf46768156395dc3f5a6e53af407f5861e5cf8d07d7565e0f7e7a3372ea07cad1faf24e29b36b0c7366b7bc59b8b8210"}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x5d, "ef851987aee900c8d2d5a3a4930bc10119123e96a547c06b2b4d56d821073c3b0448dd653eb5e8f2d443cf172f45319ea86eae8a6294a55331f40fb7be6a121fd09460737b22138836de1d4c2c149f18cf007626641dbc6cd7f59d845a"}, &(0x7f0000000600)={0xa1, 0x1, 0x400, "9820f3b37d95805825ef455fab24c781c8e6f28f723b442bf419ce7236b31e1fccdf6bd0b6da4fa8ee9bcf8c56dc1894fb1c4e544eb1c2ce69b19dfd25d3c5b260536282405c221fefcafebb3421eb21b67736938e007cc0d2b4cbf5f5792baf1f44daf5a6dfdef1223eec7889b5a291c703b888dba2f73358a26935e0ff1c3bd880642b86ef6014ce049e243cc932ff73f8a5e313ea56e98d1faeb115af909bf7796c406bbfea78244ae95954e7942df498964ebcde41038fda0de6cbf2e353ad9892a77bd4d51b29525c44237bef78e5575a423ac17cf1dae03fdf791e85b162e6a860e26a1e559ea1face93b3043b10cc7bcff38faa24415d7b46496621b077960d2be1a3987f89d30b2a565c14619cf0270261f86b2f05662640ed57765f5efbf76c5c4c1efcaacce2c7423ce841ead6d9a8ae964e27b0e04f71bc96eb6ddfccf26a452fca2d7ff0456db56ec1647b1f37ef3a23753dc24b730f73c4036705c6739ec6879917a38003a58b430b1f6f24609c1f175e7b5f286112d57a94a034616cd8d70bdc5cee34945a677f591aaabf86e7e696f5d20ee9ce33790332eee15be11ec9711099533382e0c338be5449fcf68e44223e6bff17710d79acfa7078b3de0dcf12189fc68481f221c0fad8d9cbf48b78f8493bfb2039ff7b511c6c2504077f24d6f72cb9114bbaa414a908c229e7425a5065fcdbdd6d1e23d4a28955987a65cfbc627fc7e5f187084b8033ef0e3b54ec4dcfe5d562f5136791615d3f012fddeb54cdaffe1d956b718bffe50ee95e8c11b07e130b628b4dd9620c7da25e52fbbc36cc2c45fc0d6311d566ebe406301026b207bfca034aca4472d759856fd2b484ba7c9b2d07ab1f343a45cc4df856e5da0ab28e3071f23a59a962d7ffdbf517776fc04c172eb4b7eeed0f8fbc83b5ba8a9ad9460d8c32ba2d2c32b96d0d41c64308b6e49d0ca402556424e96618ef701f4632e34e1e29775aefe8de9924f29d6e221361aaec90fbc21c3ec273313bbab0c646704130ba61f23dfbd2593ef77b7ad80d183f994576c9ae518f65cae81a6a7bbf854b67c2606a34b0a1812e6a530144c98a47c536c205b8029622ece6374310bff15ad5ccbc79eb9e2dcb82b5b728c168f83732a6188e570947b49a436a9f6745a8903efc0f8af73d61ccb64a40f730061cb506311f00de9d1d4a1d2d458b665b0e8ac04356c93385dd82f13111b3be319093d52ea02758d47449ad7134adf0ea810253489876ab9aa4c74564b232f8065d5b1239357641eb4dadd984a3adc596702d66a0704eda5bee5bafedfbea54c7583652f9e728ef91add8a4fd7ceab9467830111c18c659cb2aafd9b6b5f7b95dd56352c3b4bb650f5803f9c111b4cc9d72890bfe657556bc7323e00a13c58c2335a5d68a21e14b58a691df25de1270ab1b020ecdbe79fc9c33"}, &(0x7f0000000180)}) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x2000, 0x0, {0x0, 0xea60}, {0x4, 0x1, 0x7, 0x9, 0x3, 0x5, "28bddb3a"}, 0x0, 0x4, {}, 0x4fdd, 0x0, r9}) openat(r7, 0x0, 0xc4402, 0xb2) (async) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x3, 0x7aa5, 0x590f, 0xfffffff6}) (async) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 2.196630287s ago: executing program 3 (id=2065): socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) (async) socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x4, 0x30000, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000100)={@empty, @loopback, 0x1, "15852f6300eb9b2f002a7bf7203b375dabfcc088755603a52eca3971de54248a", 0x872, 0x5, 0x7, 0x5}, 0x3c) 1.408344008s ago: executing program 3 (id=2066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4620, 0xfffffffd, @empty, 0x1ff}, 0x1c) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000380)={0xe, {{0xa, 0x4e23, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e22, 0x10001, @mcast1, 0x5}}}, 0x108) 1.155948677s ago: executing program 3 (id=2067): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x300, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0) 852.92529ms ago: executing program 3 (id=2068): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x0, 0x0) 0s ago: executing program 9 (id=2069): io_setup(0xcf77, &(0x7f0000000040)=0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x200080, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000080)=0xf) r4 = eventfd2(0xffffffff, 0x80800) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x10}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000580)={0x2020}, 0x2020) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/card1/oss_mixer\x00', 0x100, 0x0) r7 = eventfd(0x2) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r9, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r10 = socket$kcm(0x29, 0x7, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="610508052f607f525b02346963b76a2823fafb88bc4d04b09e8364c7810daa78d453313106fdc8e94f49663fc8b6e8bad001936285e15d8ca8d5b9bd7bc44230696a5bbd6ceb6e13436da5b4bda02202803117ad5a8fa7941d18b81ba9d1969dff"], 0x61) r15 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001200)={0x28, 0x10, 0x1, 0x2, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x10, 0x0, 0x0, @fd=r15}]}, 0x28}], 0x1}, 0x0) r17 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/key-users\x00', 0x0, 0x0) r18 = eventfd(0x31) io_submit(r0, 0x9, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f0000000140)="b20ad7ead4a192829af20116205fdae726dce5e45d35bb0e2e575ea345832fc0d19353439733595555cce981eb0780dd13e09ebf244f044195f1d0d430b95d0c3f3ddfb682a6a447b8ac76", 0x4b, 0x5, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x3, r2, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7, r3, &(0x7f0000000280)="c9630309517f06a57fe47ae430bfbb2280234e0de148a983ba19955f392f53e81cef269fd2e1817cc43e04eb70c07c122576c2221a3266e6de773a83abf9bb61728ed7048d7286fdc3db3aef43ea43e5f829d31cd0651315acde84d5595358bb352ddcb81c2d5231a63504afc0caaeff9a8b0b90d5bd54bdba35bdf48f1bb0572845ae55a8faaf72ec9a4d7145f83f77b65185a3de84c4a2eaa5beb3058dfb5ef5e4619411e9ad5e65fcaed1c548e9e488c25f52db42618bcc3a007adfb51e83da89da507e5c6586057bdd", 0xcb, 0x6, 0x0, 0x3, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x80, 0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000440)="aeb160714e2d7b4fd572cd6948f6d7ab83", 0x11, 0xb4, 0x0, 0x0, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x8, r6, &(0x7f0000000500)="2ed26548a02fb5d4b262f9dc400b1fd1ff6e44753f402a4f5b9aeb64dfdc8af4e2be549513d0d9536c0fd8f8db01dc4126853e0430284f4192a82f02d451167f13ff7a", 0x43, 0x9, 0x0, 0x1, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x25, r8, &(0x7f00000005c0)="ec5034b0d108d0060b87eeb2c5c679719f74907942deee2019991fdd235b44a8e475cb43920130b68305ddcccb43ff928efd490ea06b35a9f57d63931cece38375042b89cd5d9404308e24baca55178f6bfa697d8c67ea8d55160d134d8e6e7aaa77f1b4cf13ed3767c271f979339da8dc041a7b6f98d219bba76660810cee4230fc1f74670e977973422424e57ecbd4eca799e37a35e46c92a8ffc19e928b39f8295bf9b4c16b3469042e8debee0fd85f244e99c197b26c25f5541bc61aaafb95cf4de4e67da5818aa7430e2e64dd51588705d07cb06cba4d9d54580e37454f4dcb3623", 0xe4, 0xfffffffffffffff5, 0x0, 0x0, r9}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8, r10, &(0x7f0000000700)="00a0c10d5ebaf9add1fa853652e3282e82e54fe1d5f5cc9e74447640ff180690c907cf3bd6a4684a92203a0e6c13d17d5bccbd78070e939d24660a9ba76b6150fc78d1cbb0fc4244738024e566cb3d00af41e19813d8f48707113c2d25f78d2e3874d470a2813f38183d61bbe62da57fecbfdd49197756fb5d04207297916942759a44f3c4a81f91b46158c3c5a29d7c75f4a9351a2e272a06a8091978d51f59cd5380d594e92dfa7a312cdc3f8f1e", 0xaf, 0xfff, 0x0, 0x1, r15}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x8, r17, &(0x7f0000000840)="b4a2e378e52a52225ce19d363a83b3b04405e537b16be5e2c07bdf52d2b8220511549315aae2f8bb57425d036ba57113c698020bf1e01e317b482ba1e43623f9a21861b38bfd1fdd514b458bec743f520754cf580dec32460ed4b99407023f2939d3983053f548917b546292d46e53775df12c75851ca7472931ddc31c4add571cbf011f927569619c20ae652403695d500638352d2a6d85287e6f0a4dfe02b29533159e6315aafdb4e16129cdedea603b6adfae496024a81b9291ec2b13556e94450c228654be0827f07b23d05e330babbdd2112ad654238efb19ef824a7fe3bafee4c875e6c901f1a6b8167fcc87a4cc71d7f9848d", 0xf6, 0xff5, 0x0, 0x2, r18}]) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r19], 0xf8}}, 0x20008090) kernel console output (not intermixed with test programs): iptor's value: 5 [ 417.764086][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 417.770719][ T24] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 417.779888][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.789833][ T24] usb 1-1: config 0 descriptor?? [ 417.956307][ T798] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 418.130183][ T798] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.141293][ T798] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.151689][ T798] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 418.161369][ T798] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.172325][ T798] usb 10-1: config 0 descriptor?? [ 418.292751][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 418.305414][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 418.318064][ T24] usb 1-1: USB disconnect, device number 48 [ 418.392145][T12743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1765'. [ 418.622341][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.632332][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.834371][ T12] IPVS: sh: FWM 3 0x00000003 - no destination available [ 418.858439][ T798] usbhid 10-1:0.0: can't add hid device: -71 [ 418.864643][ T798] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 418.875826][ T798] usb 10-1: USB disconnect, device number 43 [ 419.015075][ T5841] Bluetooth: hci0: command tx timeout [ 419.054277][T12753] loop2: detected capacity change from 0 to 7 [ 419.065478][T12753] Dev loop2: unable to read RDB block 7 [ 419.071213][T12753] loop2: unable to read partition table [ 419.077043][T12753] loop2: partition table beyond EOD, truncated [ 419.083911][T12753] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.442771][ T798] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 419.637691][ T798] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.651002][ T798] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.660498][ T798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.668624][ T798] usb 9-1: Product: syz [ 419.672840][ T798] usb 9-1: Manufacturer: syz [ 419.677432][ T798] usb 9-1: SerialNumber: syz [ 419.720700][ T5929] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 419.870411][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 419.884104][ T5929] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 419.893927][ T5929] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 419.904392][ T5929] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.920398][ T5929] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 419.929619][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.937903][ T5929] usb 10-1: Product: syz [ 419.942174][ T5929] usb 10-1: Manufacturer: syz [ 419.947033][ T5929] usb 10-1: SerialNumber: syz [ 419.959732][ T5929] hub 10-1:1.0: bad descriptor, ignoring hub [ 419.967096][ T5929] hub 10-1:1.0: probe with driver hub failed with error -5 [ 420.031032][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 420.038112][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.046282][ T10] usb 1-1: config 0 has no interface number 0 [ 420.056211][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 420.065483][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.073551][ T10] usb 1-1: Product: syz [ 420.078833][ T10] usb 1-1: Manufacturer: syz [ 420.083488][ T10] usb 1-1: SerialNumber: syz [ 420.091303][ T10] usb 1-1: config 0 descriptor?? [ 420.100950][ T10] usb 1-1: selecting invalid altsetting 2 [ 420.106867][ T10] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 420.121800][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.134831][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.175855][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.185051][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.257524][ T5929] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 420.322625][ T5929] usb 1-1: USB disconnect, device number 49 [ 420.358840][ T798] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 420.365081][ T798] cdc_ncm 9-1:1.0: bind() failure [ 420.376284][ T798] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 420.383245][ T798] cdc_ncm 9-1:1.1: bind() failure [ 420.474049][T12763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.482991][T12763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.492862][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.239716][ T5929] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 421.410452][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 421.417080][ T5929] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.426061][ T5929] usb 1-1: config 0 has no interface number 0 [ 421.434663][ T5929] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 421.444272][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.452298][ T5929] usb 1-1: Product: syz [ 421.457198][ T5929] usb 1-1: Manufacturer: syz [ 421.461813][ T5929] usb 1-1: SerialNumber: syz [ 421.469602][ T5929] usb 1-1: config 0 descriptor?? [ 421.478853][ T5929] usb 1-1: selecting invalid altsetting 2 [ 421.484611][ T5929] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 421.694072][ T24] usb 1-1: USB disconnect, device number 50 [ 422.311888][ T5929] usb 9-1: USB disconnect, device number 99 [ 422.552544][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.561685][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.573741][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.584401][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.594463][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.768698][ T798] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 422.797430][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1781'. [ 422.832422][T12782] chnl_net:caif_netlink_parms(): no params data found [ 422.906162][T12782] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.913419][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.921139][T12782] bridge_slave_0: entered allmulticast mode [ 422.928397][T12782] bridge_slave_0: entered promiscuous mode [ 422.937498][T12782] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.947657][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.947885][T12782] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.958890][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.967068][T12782] bridge_slave_1: entered allmulticast mode [ 422.976139][ T798] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 422.991277][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.002032][ T798] usb 1-1: config 0 descriptor?? [ 423.006137][ T5929] usb 10-1: USB disconnect, device number 44 [ 423.014577][T12782] bridge_slave_1: entered promiscuous mode [ 423.038478][ T5929] usblp0: removed [ 423.074060][T12782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.086652][T12782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.127353][T12782] team0: Port device team_slave_0 added [ 423.135922][T12782] team0: Port device team_slave_1 added [ 423.170130][T12782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.177141][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.203897][T12782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.217094][T12782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.226344][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.253328][T12782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.311176][T12782] hsr_slave_0: entered promiscuous mode [ 423.318048][T12782] hsr_slave_1: entered promiscuous mode [ 423.325420][T12782] debugfs: 'hsr0' already exists in 'hsr' [ 423.331179][T12782] Cannot create hsr debugfs directory [ 423.356604][ T5929] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 423.454083][ T798] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 423.482934][ T798] dragonrise 0003:0079:0006.0033: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 423.502983][ T798] dragonrise 0003:0079:0006.0033: no inputs found [ 423.510859][ T798] dragonrise 0003:0079:0006.0033: force feedback init failed [ 423.543666][ T5929] usb 10-1: unable to get BOS descriptor or descriptor too short [ 423.567821][ T5929] usb 10-1: not running at top speed; connect to a high speed hub [ 423.588863][ T5929] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 423.600750][T12782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.627928][ T5929] usb 10-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 423.649044][T12803] netlink: 360 bytes leftover after parsing attributes in process `syz.8.1783'. [ 423.649790][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.677939][T12781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.686715][T12781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.700731][ T5929] usb 10-1: Product: syz [ 423.705044][ T5929] usb 10-1: Manufacturer: syz [ 423.713207][ T5929] usb 10-1: SerialNumber: syz [ 423.817511][ T7346] usb 1-1: USB disconnect, device number 51 [ 423.824995][T12782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.940385][T12782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.958292][ T5929] cypress_m8 10-1:5.0: DeLorme Earthmate USB converter detected [ 423.969127][ T5929] earthmate ttyUSB0: required endpoint is missing [ 424.003857][ T5929] usb 10-1: USB disconnect, device number 45 [ 424.013897][ T5929] cypress_m8 10-1:5.0: device disconnected [ 424.048543][T12782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.187599][T12782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.202332][T12782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.213046][T12782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.224415][T12782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.296985][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.310968][T10878] block nbd4: Possible stuck request ffff888025e90000: control (read@0,1024B). Runtime 300 seconds [ 424.316010][ T57] IPVS: sh: FWM 3 0x00000003 - no destination available [ 424.322244][T10878] block nbd4: Possible stuck request ffff888025e901c0: control (read@1024,1024B). Runtime 300 seconds [ 424.340118][T10878] block nbd4: Possible stuck request ffff888025e90380: control (read@2048,1024B). Runtime 300 seconds [ 424.349457][T12782] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.352512][T10878] block nbd4: Possible stuck request ffff888025e90540: control (read@3072,1024B). Runtime 300 seconds [ 424.387466][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.394739][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.416326][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.423528][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.524469][T12827] sctp: [Deprecated]: syz.0.1787 (pid 12827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.524469][T12827] Use struct sctp_sack_info instead [ 424.768985][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.822082][ T5841] Bluetooth: hci2: command tx timeout [ 424.885409][T12782] veth0_vlan: entered promiscuous mode [ 424.907035][T12782] veth1_vlan: entered promiscuous mode [ 424.956456][T12782] veth0_macvtap: entered promiscuous mode [ 424.980387][T12782] veth1_macvtap: entered promiscuous mode [ 424.987283][ T5867] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 425.041784][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.058940][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.085265][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.094634][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.116115][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.127270][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.200744][ T5867] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 425.213555][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.236997][ T5867] usb 10-1: Product: syz [ 425.242122][ T5867] usb 10-1: Manufacturer: syz [ 425.246835][ T5867] usb 10-1: SerialNumber: syz [ 425.267345][T12854] syzkaller1: entered promiscuous mode [ 425.273982][T12854] syzkaller1: entered allmulticast mode [ 425.290828][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.299882][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.387264][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.397684][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.613863][ T10] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 425.725954][ T5867] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 425.738023][ T5867] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 425.741304][ T5929] usb 9-1: new low-speed USB device number 101 using dummy_hcd [ 425.756676][ T10] usb 1-1: device descriptor read/64, error -71 [ 425.923135][ T5929] usb 9-1: Invalid ep0 maxpacket: 64 [ 425.964795][ T5867] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 425.977827][ T5867] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 425.987940][ T5867] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 425.998755][ T5867] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 426.011696][ T5867] usb 10-1: USB disconnect, device number 46 [ 426.020145][ T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 426.062214][ T5929] usb 9-1: new low-speed USB device number 102 using dummy_hcd [ 426.158404][ T10] usb 1-1: device descriptor read/64, error -71 [ 426.222588][ T5929] usb 9-1: Invalid ep0 maxpacket: 64 [ 426.228429][ T5929] usb usb9-port1: attempt power cycle [ 426.276250][ T10] usb usb1-port1: attempt power cycle [ 426.597200][ T5929] usb 9-1: new low-speed USB device number 103 using dummy_hcd [ 426.625018][ T5929] usb 9-1: Invalid ep0 maxpacket: 64 [ 426.639773][ T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 426.662374][ T10] usb 1-1: device descriptor read/8, error -71 [ 426.767962][ T5929] usb 9-1: new low-speed USB device number 104 using dummy_hcd [ 426.791132][ T5929] usb 9-1: Invalid ep0 maxpacket: 64 [ 426.796739][ T5929] usb usb9-port1: unable to enumerate USB device [ 426.810757][ T5867] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 426.917591][ T10] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 426.939615][ T10] usb 1-1: device descriptor read/8, error -71 [ 426.949790][ T5867] usb 10-1: device descriptor read/64, error -71 [ 427.049964][ T5841] Bluetooth: hci2: command tx timeout [ 427.057325][ T10] usb usb1-port1: unable to enumerate USB device [ 427.208527][ T5867] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 427.356156][ T5867] usb 10-1: device descriptor read/64, error -71 [ 427.474724][ T5867] usb usb10-port1: attempt power cycle [ 427.848074][ T5867] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 427.881036][ T5867] usb 10-1: device descriptor read/8, error -71 [ 428.136999][ T5867] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 428.159559][ T5867] usb 10-1: device descriptor read/8, error -71 [ 428.287887][ T5867] usb usb10-port1: unable to enumerate USB device [ 428.329385][ T3593] wlan1: Trigger new scan to find an IBSS to join [ 428.683886][T12872] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 428.690205][T12872] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 428.699026][T12872] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 428.716434][T12872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.733518][T12872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 428.757398][T12872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 428.772079][T12872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.789184][T12872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 428.823115][T12872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 428.905822][T12875] syzkaller1: entered promiscuous mode [ 428.923327][T12875] syzkaller1: entered allmulticast mode [ 428.945499][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.962479][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.281079][ T5964] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 429.441479][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 429.450314][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.461607][ T5964] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 429.470903][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.481768][ T5964] usb 1-1: config 0 descriptor?? [ 429.494843][ T24] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 429.674070][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 429.682954][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 429.690752][ T24] usb 9-1: can't read configurations, error -71 [ 429.704284][ T5964] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 429.785890][ T12] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.856902][T12892] lo speed is unknown, defaulting to 1000 [ 429.865468][T12892] lo speed is unknown, defaulting to 1000 [ 429.874369][T12892] lo speed is unknown, defaulting to 1000 [ 429.887471][T12892] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 429.902876][T12892] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 429.939430][T12892] lo speed is unknown, defaulting to 1000 [ 429.947606][T12892] lo speed is unknown, defaulting to 1000 [ 429.955031][T12892] lo speed is unknown, defaulting to 1000 [ 429.964209][T12892] lo speed is unknown, defaulting to 1000 [ 429.971609][T12892] lo speed is unknown, defaulting to 1000 [ 429.979115][T12892] lo speed is unknown, defaulting to 1000 [ 429.986011][T12892] lo speed is unknown, defaulting to 1000 [ 429.993258][T12892] lo speed is unknown, defaulting to 1000 [ 430.000344][T12892] lo speed is unknown, defaulting to 1000 [ 430.007302][T12892] lo speed is unknown, defaulting to 1000 [ 430.014386][T12892] lo speed is unknown, defaulting to 1000 [ 430.021436][T12892] lo speed is unknown, defaulting to 1000 [ 430.028359][T12892] lo speed is unknown, defaulting to 1000 [ 430.200243][T12900] netlink: 'syz.9.1809': attribute type 3 has an invalid length. [ 430.219725][T12900] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1809'. [ 430.574982][ T24] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 430.585668][ T10] usb 10-1: new low-speed USB device number 51 using dummy_hcd [ 430.725049][ T10] usb 10-1: device descriptor read/64, error -71 [ 430.746127][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 430.753162][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 430.761292][ T24] usb 9-1: can't read configurations, error -22 [ 430.771760][ T24] usb usb9-port1: attempt power cycle [ 430.895899][ T5148] Bluetooth: hci5: command 0x0c1a tx timeout [ 430.896980][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.981296][ T5841] Bluetooth: hci2: command 0x0419 tx timeout [ 430.981965][ T10] usb 10-1: new low-speed USB device number 52 using dummy_hcd [ 431.130991][ T10] usb 10-1: device descriptor read/64, error -71 [ 431.131183][ T24] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 431.174256][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 431.181541][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 431.189705][ T24] usb 9-1: can't read configurations, error -22 [ 431.249786][ T10] usb usb10-port1: attempt power cycle [ 431.334177][ T24] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 431.358826][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 431.366068][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 431.375432][ T24] usb 9-1: can't read configurations, error -22 [ 431.382167][ T24] usb usb9-port1: unable to enumerate USB device [ 431.580440][ T3593] wlan1: Trigger new scan to find an IBSS to join [ 431.612318][ T10] usb 10-1: new low-speed USB device number 53 using dummy_hcd [ 431.634128][ T10] usb 10-1: device descriptor read/8, error -71 [ 431.901869][ T10] usb 10-1: new low-speed USB device number 54 using dummy_hcd [ 431.923721][ T10] usb 10-1: device descriptor read/8, error -71 [ 432.040177][ T10] usb usb10-port1: unable to enumerate USB device [ 432.221879][ T5929] usb 1-1: USB disconnect, device number 56 [ 433.120275][ T5148] Bluetooth: hci5: command 0x0c1a tx timeout [ 433.122241][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.205702][ T5835] Bluetooth: hci2: command 0x0419 tx timeout [ 433.670503][T12932] 9pnet: Unknown protocol version 9 [ 433.769927][T12929] syz.0.1818 (12929): drop_caches: 2 [ 433.785477][T12929] syz.0.1818 (12929): drop_caches: 2 [ 433.934266][T12937] fuseblk: Unknown parameter 'dont_appraise' [ 433.943551][ T5929] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 434.112566][ T5929] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 434.133142][ T5929] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 434.142392][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.164863][ T5929] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 434.381116][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 434.390441][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 434.400376][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 434.411451][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 434.429395][ T24] usb 1-1: USB disconnect, device number 57 [ 434.745725][ T2978] wlan1: Trigger new scan to find an IBSS to join [ 434.852514][ T5929] usb 9-1: new full-speed USB device number 109 using dummy_hcd [ 434.884530][ T24] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 435.009773][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.018680][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.036123][ T5929] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.045661][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 435.048947][ T5929] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.054508][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 435.066413][ T5929] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.067692][ T24] usb 10-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 435.079193][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.086112][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.095596][ T5929] usb 9-1: Product: syz [ 435.106706][ T5929] usb 9-1: Manufacturer: syz [ 435.111855][ T5929] usb 9-1: SerialNumber: syz [ 435.113303][ T24] usb 10-1: config 0 descriptor?? [ 435.175251][ T3489] IPVS: sh: FWM 3 0x00000003 - no destination available [ 435.280283][ T7346] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 435.344160][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.344577][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.353382][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.358906][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 435.399678][ T5929] usb 9-1: invalid UAC_HEADER (v1) [ 435.430474][ T5835] Bluetooth: hci2: command 0x0419 tx timeout [ 435.436512][ T5929] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 435.443347][ T5929] usb 9-1: USB disconnect, device number 109 [ 435.452452][ T7346] usb 1-1: Using ep0 maxpacket: 8 [ 435.474169][ T7346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.498151][ T7346] usb 1-1: config 7 has an invalid interface number: 169 but max is 0 [ 435.520573][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.542459][ T7346] usb 1-1: config 7 has no interface number 0 [ 435.555455][ T7346] usb 1-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 435.575898][ T7346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.591122][ T7346] usb 1-1: Product: syz [ 435.591171][ T24] input: HID 28bd:1903 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:1903.0034/input/input58 [ 435.595388][ T7346] usb 1-1: Manufacturer: syz [ 435.595406][ T7346] usb 1-1: SerialNumber: syz [ 435.630198][ T24] uclogic 0003:28BD:1903.0034: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:1903] on usb-dummy_hcd.9-1/input0 [ 435.661683][T12965] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 435.668245][T12965] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.716771][T12965] vhci_hcd vhci_hcd.0: Device attached [ 435.752020][ T3593] wlan1: Creating new IBSS network, BSSID ee:d5:7e:26:9c:2b [ 435.803664][ T24] usb 10-1: USB disconnect, device number 55 [ 435.893994][ T7346] usb 1-1: USB disconnect, device number 58 [ 435.975469][ T5929] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 436.008679][ T9] usb 50-1: SetAddress Request (2) to port 0 [ 436.015702][ T9] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 436.125181][ T5929] usb 9-1: device descriptor read/64, error -71 [ 436.381696][ T5929] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 436.500482][T12977] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1833'. [ 436.531378][ T5929] usb 9-1: device descriptor read/64, error -71 [ 436.671482][ T5929] usb usb9-port1: attempt power cycle [ 436.911415][T12992] lo speed is unknown, defaulting to 1000 [ 437.045150][ T5929] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 437.089249][ T5929] usb 9-1: device descriptor read/8, error -71 [ 437.354831][ T5929] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 437.403397][ T5929] usb 9-1: device descriptor read/8, error -71 [ 437.516227][T13008] fuse: Unknown parameter 'group_id¡Ï' [ 437.526271][ T5929] usb usb9-port1: unable to enumerate USB device [ 437.660829][ T5835] Bluetooth: hci2: command 0x0419 tx timeout [ 438.220410][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 438.234486][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 438.408138][T13044] lo speed is unknown, defaulting to 1000 [ 438.693632][ T5894] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 438.864630][ T5894] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 438.881509][T12967] vhci_hcd: connection reset by peer [ 438.889230][ T5894] usb 1-1: config 0 has no interface number 0 [ 438.907932][ T36] vhci_hcd vhci_hcd.8: stop threads [ 438.919429][ T5894] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 438.931486][ T36] vhci_hcd vhci_hcd.8: release socket [ 438.942439][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.953762][ T36] vhci_hcd vhci_hcd.8: disconnect device [ 438.960189][ T5929] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 438.968339][ T5894] usb 1-1: Product: syz [ 438.976436][ T5894] usb 1-1: Manufacturer: syz [ 438.983148][ T5894] usb 1-1: SerialNumber: syz [ 439.001696][ T5894] usb 1-1: config 0 descriptor?? [ 439.011172][ T5894] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 439.037959][ T5894] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 439.137235][ T5929] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.159286][ T5929] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.171879][ T5929] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.187852][ T5929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.197896][ T5929] usb 10-1: SerialNumber: syz [ 439.231162][T13044] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1849'. [ 439.241045][T13044] 0ªî{X¹¦: renamed from gretap0 [ 439.249062][T13044] 0ªî{X¹¦: entered allmulticast mode [ 439.254585][T13044] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 439.281557][ T10] usb 1-1: USB disconnect, device number 59 [ 439.412416][ T5894] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 439.435194][ T5929] usb 10-1: skipping empty audio interface (v1) [ 439.471401][ T5929] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 439.482674][ T5929] usb 10-1: USB disconnect, device number 56 [ 439.499461][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.579287][ T5894] usb 9-1: Using ep0 maxpacket: 32 [ 439.585979][ T5894] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 439.595519][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.605409][ T5894] usb 9-1: config 0 descriptor?? [ 439.614059][ T5894] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 439.624361][ T5894] input: xirlink-cit as /devices/platform/dummy_hcd.8/usb9/9-1/input/input59 [ 439.827840][ T24] usb 9-1: USB disconnect, device number 114 [ 439.882909][ T5835] Bluetooth: hci2: command 0x0419 tx timeout [ 440.036096][T13067] dlm: no locking on control device [ 440.295625][ T5894] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 440.419549][T13073] hub 9-0:1.0: USB hub found [ 440.425294][T13073] hub 9-0:1.0: 1 port detected [ 440.456228][ T5894] usb 10-1: Using ep0 maxpacket: 16 [ 440.462001][ T5929] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 440.472820][ T5894] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.484602][ T5894] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.496486][ T5894] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.507743][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.516053][ T5894] usb 10-1: Product: syz [ 440.520424][ T5894] usb 10-1: Manufacturer: syz [ 440.525127][ T5894] usb 10-1: SerialNumber: syz [ 440.639579][ T5929] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.651089][ T5929] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 440.664554][ T5929] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.673776][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.682199][ T5929] usb 1-1: Product: syz [ 440.686407][ T5929] usb 1-1: Manufacturer: syz [ 440.691002][ T5929] usb 1-1: SerialNumber: syz [ 440.736722][ T3489] IPVS: sh: FWM 3 0x00000003 - no destination available [ 440.755480][ T7346] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 440.766431][ T5894] usb 10-1: 0:2 : does not exist [ 440.773388][ T5894] usb 10-1: unit 9 not found! [ 440.795111][ T5894] usb 10-1: USB disconnect, device number 57 [ 440.894536][ T7346] usb 9-1: device descriptor read/64, error -71 [ 440.918773][ T30] audit: type=1804 audit(1761969477.459:90): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1858" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=242 res=1 errno=0 [ 440.921612][T13071] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 440.941275][ T30] audit: type=1800 audit(1761969477.459:91): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1858" name="cgroup.controllers" dev="tmpfs" ino=242 res=0 errno=0 [ 441.151151][ T7346] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 441.290046][ T7346] usb 9-1: device descriptor read/64, error -71 [ 441.395569][ T5929] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 441.403011][ T5929] cdc_ncm 1-1:1.0: bind() failure [ 441.414119][ T7346] usb usb9-port1: attempt power cycle [ 441.422635][ T5929] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 441.434383][ T9] usb 50-1: device descriptor read/8, error -110 [ 441.442688][ T5929] cdc_ncm 1-1:1.1: bind() failure [ 441.503779][T13083] lo speed is unknown, defaulting to 1000 [ 441.807362][ T7346] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 441.836240][ T7346] usb 9-1: device descriptor read/8, error -71 [ 441.857737][ T9] usb usb50-port1: attempt power cycle [ 442.049427][ T5929] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 442.092192][ T7346] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 442.114008][ T7346] usb 9-1: device descriptor read/8, error -71 [ 442.211525][ T5929] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.222649][ T5929] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 442.234125][ T7346] usb usb9-port1: unable to enumerate USB device [ 442.241843][ T5929] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.251020][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.259186][ T5929] usb 10-1: Product: syz [ 442.263461][ T5929] usb 10-1: Manufacturer: syz [ 442.268159][ T5929] usb 10-1: SerialNumber: syz [ 442.281669][ T5929] cdc_ncm 10-1:1.0: skipping garbage [ 442.456962][ T9] usb usb50-port1: unable to enumerate USB device [ 442.469800][T13093] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 442.497567][T13089] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 442.718793][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1870'. [ 442.731621][T13103] x_tables: duplicate underflow at hook 4 [ 442.869904][T13110] sp0: Synchronizing with TNC [ 443.149518][T13089] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 443.373812][ T5929] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 443.380507][ T5929] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 443.388399][ T5929] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 443.428060][ T24] usb 1-1: USB disconnect, device number 60 [ 443.469607][T13115] ceph: No source [ 443.480811][T10878] block nbd1: Possible stuck request ffff888025d87000: control (read@0,4096B). Runtime 90 seconds [ 443.493377][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.501356][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.588567][ T5929] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 443.607722][ T5929] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 443.629862][ T5929] usb 10-1: USB disconnect, device number 58 [ 443.643656][ T5929] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 443.792125][T13122] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 443.890202][T13128] syzkaller1: entered promiscuous mode [ 443.895723][T13128] syzkaller1: entered allmulticast mode [ 444.014547][T13135] syz.2.1880 (13135): drop_caches: 2 [ 444.034089][T13135] syz.2.1880 (13135): drop_caches: 2 [ 444.192088][ T798] Process accounting resumed [ 444.202353][T13141] netlink: 'syz.9.1883': attribute type 46 has an invalid length. [ 444.244870][T13141] Process accounting resumed [ 444.359299][ T798] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 444.369896][ T7346] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 444.519735][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 444.526768][ T798] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 444.532205][ T7346] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 444.536070][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.547196][ T7346] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 444.572620][ T7346] usb 9-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 444.574059][ T798] usb 1-1: config 0 descriptor?? [ 444.592818][ T7346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.609316][ T7346] usb 9-1: Product: syz [ 444.614664][ T7346] usb 9-1: Manufacturer: syz [ 444.621953][ T7346] usb 9-1: SerialNumber: syz [ 444.637854][ T798] as10x_usb: device has been detected [ 444.650732][ T7346] usb 9-1: config 0 descriptor?? [ 444.652597][T13152] program syz.9.1886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.665924][ T798] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 444.702292][ T798] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 444.720130][ T798] as10x_usb: error during firmware upload part1 [ 444.727293][ T798] Registered device nBox DVB-T Dongle [ 444.842110][ T798] usb 1-1: USB disconnect, device number 61 [ 444.881882][ T798] Unregistered device nBox DVB-T Dongle [ 444.884902][T13139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.900887][ T798] as10x_usb: device has been disconnected [ 444.926730][T13139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.951779][ T7346] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 445.014547][ T7346] usb 9-1: USB disconnect, device number 119 [ 445.030436][T13158] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 445.084997][T13137] tipc: Started in network mode [ 445.103921][T13137] tipc: Node identity 065b37dd3ac7, cluster identity 4711 [ 445.122300][T13137] tipc: Enabled bearer , priority 0 [ 445.192158][T13137] syzkaller0: entered promiscuous mode [ 445.199027][T13137] syzkaller0: entered allmulticast mode [ 445.205898][T13137] tipc: Resetting bearer [ 445.259934][T13136] tipc: Resetting bearer [ 445.628183][T13176] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1892'. [ 446.223031][ T3489] IPVS: sh: FWM 3 0x00000003 - no destination available [ 446.330143][ T798] tipc: Node number set to 1016870877 [ 447.244636][T13136] tipc: Disabling bearer [ 447.436301][T13186] netlink: 'syz.9.1896': attribute type 7 has an invalid length. [ 447.445593][T13186] netlink: 'syz.9.1896': attribute type 8 has an invalid length. [ 447.456640][T13186] netlink: 'syz.9.1896': attribute type 7 has an invalid length. [ 447.464830][T13186] netlink: 208780 bytes leftover after parsing attributes in process `syz.9.1896'. [ 447.624820][T13188] syz.0.1897 (13188): drop_caches: 2 [ 447.630276][ T798] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 447.826296][ T798] usb 9-1: config 0 has an invalid interface number: 18 but max is 0 [ 447.834435][ T798] usb 9-1: config 0 has no interface number 0 [ 447.850382][ T798] usb 9-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.861924][ T798] usb 9-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.872998][ T798] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 447.882824][ T798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.893334][ T798] usb 9-1: config 0 descriptor?? [ 447.920914][ T5930] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 448.080682][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 448.088318][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 448.100054][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 448.116577][ T5930] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 448.125792][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.133815][ T5930] usb 1-1: Product: syz [ 448.134124][ T24] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 448.138086][ T5930] usb 1-1: Manufacturer: syz [ 448.150278][ T5930] usb 1-1: SerialNumber: syz [ 448.158291][ T5930] usb 1-1: config 0 descriptor?? [ 448.221194][ T5930] rc_core: IR keymap rc-streamzap not found [ 448.227134][ T5930] Registered IR keymap rc-empty [ 448.233407][ T5930] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 448.249592][ T5930] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60 [ 448.284037][ T24] usb 10-1: device descriptor read/64, error -71 [ 448.335887][ T798] uclogic 0003:256C:006D.0035: interface is invalid, ignoring [ 448.400966][ T5930] usb 1-1: USB disconnect, device number 62 [ 448.563298][ T24] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 448.617294][ T5913] usb 9-1: USB disconnect, device number 120 [ 448.711715][ T24] usb 10-1: device descriptor read/64, error -71 [ 448.840716][ T24] usb usb10-port1: attempt power cycle [ 449.203695][ T24] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 449.225742][ T24] usb 10-1: device descriptor read/8, error -71 [ 449.247179][ T5929] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 449.406897][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 449.415509][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 449.430182][ T5929] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 449.442393][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.458100][ T5929] usb 1-1: Product: syz [ 449.469540][ T5929] usb 1-1: Manufacturer: syz [ 449.476545][ T5929] usb 1-1: SerialNumber: syz [ 449.487447][ T5929] usb 1-1: config 0 descriptor?? [ 449.495937][T13219] overlayfs: missing 'lowerdir' [ 449.513616][ T24] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 449.535774][ T24] usb 10-1: device descriptor read/8, error -71 [ 449.578235][ T798] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 449.600894][ T798] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.653055][ T24] usb usb10-port1: unable to enumerate USB device [ 449.739839][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.748734][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.806949][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.825150][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.045714][ T5929] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 450.070678][ T5929] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 450.115518][ T5929] usb 1-1: USB disconnect, device number 63 [ 450.619553][T13231] netlink: 187320 bytes leftover after parsing attributes in process `syz.8.1908'. [ 450.647206][T13231] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4 [ 450.848784][T13241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 450.855351][T13241] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 450.902879][T13245] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 450.909442][T13245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.921163][T13241] vhci_hcd vhci_hcd.0: Device attached [ 450.927434][T13245] vhci_hcd vhci_hcd.0: Device attached [ 450.941464][T13241] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 450.948018][T13241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 450.958609][T13241] vhci_hcd vhci_hcd.0: Device attached [ 450.982705][T13241] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 450.989272][T13241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.998381][T13241] vhci_hcd vhci_hcd.0: Device attached [ 451.007219][T13250] vhci_hcd: connection closed [ 451.007439][T13248] vhci_hcd: connection closed [ 451.010427][T13246] vhci_hcd: connection closed [ 451.012636][ T3489] vhci_hcd vhci_hcd.0: stop threads [ 451.012664][ T3489] vhci_hcd vhci_hcd.0: release socket [ 451.012687][ T3489] vhci_hcd vhci_hcd.0: disconnect device [ 451.016289][ T3489] vhci_hcd vhci_hcd.0: stop threads [ 451.026171][T13242] vhci_hcd: connection closed [ 451.027813][ T3489] vhci_hcd vhci_hcd.0: release socket [ 451.054909][ T3489] vhci_hcd vhci_hcd.0: disconnect device [ 451.062341][ T3489] vhci_hcd vhci_hcd.0: stop threads [ 451.068027][ T3489] vhci_hcd vhci_hcd.0: release socket [ 451.073712][ T3489] vhci_hcd vhci_hcd.0: disconnect device [ 451.080253][ T3489] vhci_hcd vhci_hcd.0: stop threads [ 451.086677][ T3489] vhci_hcd vhci_hcd.0: release socket [ 451.092239][ T3489] vhci_hcd vhci_hcd.0: disconnect device [ 451.128457][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 451.534766][ T5867] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 451.687275][ T3489] IPVS: sh: FWM 3 0x00000003 - no destination available [ 451.717536][ T5867] usb 10-1: Using ep0 maxpacket: 16 [ 451.726219][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.737577][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.747507][ T5867] usb 10-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 451.766995][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.778099][ T5867] usb 10-1: config 0 descriptor?? [ 451.904377][ T5930] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 452.097861][ T5930] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 452.107937][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.123275][ T5930] usb 1-1: Product: syz [ 452.127488][ T5930] usb 1-1: Manufacturer: syz [ 452.132103][ T5930] usb 1-1: SerialNumber: syz [ 452.154722][ T5930] usb 1-1: config 0 descriptor?? [ 452.174516][ T5930] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 452.227495][ T5867] asus 0003:0B05:1822.0037: unknown main item tag 0x0 [ 452.234681][ T5867] asus 0003:0B05:1822.0037: unknown main item tag 0x0 [ 452.241592][ T5867] asus 0003:0B05:1822.0037: unknown main item tag 0x0 [ 452.248578][ T5867] asus 0003:0B05:1822.0037: unknown main item tag 0x0 [ 452.255600][ T5867] asus 0003:0B05:1822.0037: unknown main item tag 0x0 [ 452.274086][ T5867] asus 0003:0B05:1822.0037: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.9-1/input0 [ 452.285953][ T5867] asus 0003:0B05:1822.0037: Asus input not registered [ 452.295362][ T5867] asus 0003:0B05:1822.0037: probe with driver asus failed with error -12 [ 452.465172][ T5867] usb 10-1: USB disconnect, device number 63 [ 453.082957][T13287] 9pnet_fd: Insufficient options for proto=fd [ 453.089784][T13284] 9pnet_fd: Insufficient options for proto=fd [ 453.149647][ T5930] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 453.158291][ T5930] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 453.782556][ T5913] usb 1-1: USB disconnect, device number 64 [ 454.023741][T13296] autofs4:pid:13296:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 454.043833][T13296] autofs4:pid:13296:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 454.214417][T13300] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 13300 comm: syz.9.1926) [ 454.232398][ T30] audit: type=1800 audit(1761969489.906:92): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1926" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=59162 res=0 errno=0 [ 454.248727][T13300] netlink: 'syz.9.1926': attribute type 16 has an invalid length. [ 454.337118][ T5913] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 454.409967][T13305] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 454.415196][T13304] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 454.504147][ T5913] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 454.538498][ T5913] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.557677][ T5913] usb 9-1: config 0 interface 0 has no altsetting 0 [ 454.569530][ T5913] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.596457][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.618927][ T5913] usb 9-1: Product: syz [ 454.623137][ T5913] usb 9-1: Manufacturer: syz [ 454.652807][ T5913] usb 9-1: SerialNumber: syz [ 454.675366][ T5913] usb 9-1: config 0 descriptor?? [ 454.698494][ T5913] hub 9-1:0.0: bad descriptor, ignoring hub [ 454.712418][ T5913] hub 9-1:0.0: probe with driver hub failed with error -5 [ 454.736787][ T5913] usb 9-1: selecting invalid altsetting 0 [ 454.946228][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 455.022449][ T5930] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 455.056695][ T5929] usb 9-1: USB disconnect, device number 121 [ 455.118508][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 455.126056][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.143095][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.156118][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 455.165835][ T9] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 455.174450][ T9] usb 1-1: Manufacturer: syz [ 455.184964][ T9] usb 1-1: config 0 descriptor?? [ 455.196366][ T5930] usb 10-1: Using ep0 maxpacket: 32 [ 455.210134][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.228197][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.238968][ T5930] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 455.250033][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.267090][ T5930] usb 10-1: config 0 descriptor?? [ 455.664587][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.677780][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.687313][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.704697][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.717790][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 455.736881][ T30] audit: type=1326 audit(1761969491.309:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.9.1933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6a918efc9 code=0x0 [ 455.758972][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 455.774675][ T9] usb 1-1: USB disconnect, device number 65 [ 455.951502][ T5929] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 456.112574][ T5929] usb 9-1: too many configurations: 237, using maximum allowed: 8 [ 456.131300][ T5929] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.141646][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.150626][ T5929] usb 9-1: Product: syz [ 456.155023][ T5929] usb 9-1: Manufacturer: syz [ 456.159646][ T5929] usb 9-1: SerialNumber: syz [ 456.170797][ T5929] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 456.188848][ T7346] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.310961][T13332] ªªªªªª: renamed from veth0_vlan (while UP) [ 456.487690][T10878] block nbd4: Possible stuck request ffff888025e90000: control (read@0,1024B). Runtime 330 seconds [ 456.498672][T10878] block nbd4: Possible stuck request ffff888025e901c0: control (read@1024,1024B). Runtime 330 seconds [ 456.510102][T10878] block nbd4: Possible stuck request ffff888025e90380: control (read@2048,1024B). Runtime 330 seconds [ 456.524689][T10878] block nbd4: Possible stuck request ffff888025e90540: control (read@3072,1024B). Runtime 330 seconds [ 456.628898][ T5913] usb 9-1: USB disconnect, device number 122 [ 457.331523][ T7346] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 457.338831][ T7346] ath9k_htc: Failed to initialize the device [ 457.346367][ T5913] usb 9-1: ath9k_htc: USB layer deinitialized [ 457.662281][ T5913] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 457.822716][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 457.829484][ T5913] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 457.838624][ T5913] usb 9-1: config 0 has no interface number 0 [ 457.848771][ T5913] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.860130][ T5913] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 457.871852][ T5913] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.882933][ T5913] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.896306][ T5913] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 457.905915][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.916754][ T5913] usb 9-1: config 0 descriptor?? [ 457.930890][ T5913] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 457.984885][ T5930] usbhid 10-1:0.0: can't add hid device: -71 [ 457.995597][ T5930] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 458.013932][ T5930] usb 10-1: USB disconnect, device number 64 [ 458.346853][ T5930] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 458.509406][ T5930] usb 10-1: unable to get BOS descriptor or descriptor too short [ 458.518839][ T5930] usb 10-1: not running at top speed; connect to a high speed hub [ 458.528131][ T5930] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 458.544675][ T5930] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.555014][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.563362][ T5930] usb 10-1: Product: syz [ 458.567683][ T5930] usb 10-1: Manufacturer: syz [ 458.572533][ T5930] usb 10-1: SerialNumber: syz [ 458.893865][ T5930] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 459.026571][ T5930] usb 10-1: USB disconnect, device number 65 [ 459.064560][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.512402][ T5913] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 459.678474][ T5913] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 459.687721][ T5913] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 459.695939][ T5913] usb 10-1: Product: syz [ 459.700213][ T5913] usb 10-1: SerialNumber: syz [ 459.708245][ T5913] usb 10-1: config 0 descriptor?? [ 459.957564][ T5913] hso 10-1:0.0: Failed to find BULK IN ep [ 460.177543][ T5930] usb 10-1: USB disconnect, device number 66 [ 460.327875][ T9] usb 9-1: USB disconnect, device number 123 [ 460.342161][ T9] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 461.127114][ T5930] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 461.159887][ T5929] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 461.289680][ T5930] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.300350][ T5930] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.311224][ T5930] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 461.320526][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 461.328610][ T5930] usb 10-1: SerialNumber: syz [ 461.333412][ T5929] usb 9-1: Using ep0 maxpacket: 32 [ 461.342825][ T5929] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 461.352676][ T5929] usb 9-1: config 0 has no interface number 0 [ 461.359958][ T5929] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 461.370109][ T5929] usb 9-1: config 0 interface 196 has no altsetting 0 [ 461.379008][ T5929] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 461.388392][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.396533][ T5929] usb 9-1: Product: syz [ 461.400730][ T5929] usb 9-1: Manufacturer: syz [ 461.405440][ T5929] usb 9-1: SerialNumber: syz [ 461.413000][ T5929] usb 9-1: config 0 descriptor?? [ 461.418799][T13359] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 461.574061][ T5930] usb 10-1: 0:2 : does not exist [ 461.585038][ T5930] usb 10-1: unit 255 not found! [ 461.593580][ T5930] usb 10-1: 5:0: cannot get min/max values for control 15 (id 5) [ 461.605152][ T5930] usb 10-1: 5:0: cannot get min/max values for control 16 (id 5) [ 461.619307][ T5930] usb 10-1: 5:0: cannot get min/max values for control 17 (id 5) [ 461.638863][ T5930] usb 10-1: USB disconnect, device number 67 [ 461.672075][ T5929] ipheth 9-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 461.692685][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.720343][ T5929] ipheth 9-1:0.196: Apple iPhone USB Ethernet device attached [ 461.745883][ T5929] usb 9-1: USB disconnect, device number 124 [ 461.791666][ T5929] ipheth 9-1:0.196: Apple iPhone USB Ethernet now disconnected [ 461.951673][ T2978] IPVS: sh: FWM 3 0x00000003 - no destination available [ 462.127505][ T5929] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 462.293334][ T5929] usb 9-1: Using ep0 maxpacket: 16 [ 462.295382][T13369] loop5: detected capacity change from 0 to 7 [ 462.312714][ T5929] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 462.323841][ T5929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 462.334238][T13369] Dev loop5: unable to read RDB block 7 [ 462.336310][ T5929] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 462.341624][T13369] loop5: unable to read partition table [ 462.354807][ T5929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.360070][T13369] loop5: partition table beyond EOD, truncated [ 462.367252][ T5929] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 462.378429][T13369] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 462.403261][ T5929] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 462.412743][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.420790][ T5929] usb 9-1: Product: syz [ 462.425128][ T5929] usb 9-1: Manufacturer: syz [ 462.429773][ T5929] usb 9-1: SerialNumber: syz [ 462.431515][T13371] Dev loop5: unable to read RDB block 7 [ 462.439540][ T5929] usb 9-1: config 0 descriptor?? [ 462.440841][T13371] loop5: unable to read partition table [ 462.446702][T13363] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 462.451608][T13371] loop5: partition table beyond EOD, truncated [ 462.496261][ T5929] mcba_usb 9-1:0.0 can0: couldn't setup read URBs [ 462.502733][ T5929] mcba_usb 9-1:0.0 can0: couldn't start device: -90 [ 462.563334][ T5929] mcba_usb 9-1:0.0: probe with driver mcba_usb failed with error -90 [ 462.572074][ T9] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 462.686286][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.696247][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.731211][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 462.738138][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 462.749888][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 462.750846][ T798] usb 9-1: USB disconnect, device number 125 [ 462.761756][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 462.777494][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.792527][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.803909][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.818652][ T9] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 462.827971][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.836070][ T9] usb 10-1: Product: syz [ 462.840621][ T9] usb 10-1: Manufacturer: syz [ 462.845337][ T9] usb 10-1: SerialNumber: syz [ 462.852318][ T9] usb 10-1: config 0 descriptor?? [ 463.075955][ T9] usb 10-1: USB disconnect, device number 68 [ 463.887622][ T5867] usb 9-1: new full-speed USB device number 126 using dummy_hcd [ 464.059549][ T5867] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 464.071946][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.087104][ T5867] usb 9-1: config 0 descriptor?? [ 464.107861][ T5867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 464.320862][ T5867] gp8psk: usb in 128 operation failed. [ 464.333714][ T5867] gp8psk: usb in 137 operation failed. [ 464.339571][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 464.362535][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 464.385354][ T5867] usb 9-1: USB disconnect, device number 126 [ 465.308415][ T7346] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 465.468906][ T7346] usb 10-1: Using ep0 maxpacket: 32 [ 465.477500][ T7346] usb 10-1: config 0 has an invalid interface number: 240 but max is 0 [ 465.486054][ T7346] usb 10-1: config 0 has no interface number 0 [ 465.492398][ T7346] usb 10-1: config 0 interface 240 has no altsetting 0 [ 465.503787][ T7346] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=13.1c [ 465.513172][ T7346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.522093][ T7346] usb 10-1: Product: syz [ 465.526465][ T7346] usb 10-1: Manufacturer: syz [ 465.531129][ T7346] usb 10-1: SerialNumber: syz [ 465.538239][ T7346] usb 10-1: config 0 descriptor?? [ 465.763582][ T7346] speedtch 10-1:0.240: speedtch_bind: wrong device class 252 [ 465.774080][ T7346] speedtch 10-1:0.240: usbatm_usb_probe: bind failed: -19! [ 465.789395][ T7346] usb 10-1: USB disconnect, device number 69 [ 466.110434][ T5930] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 466.128530][T13426] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1967'. [ 466.140580][T13426] Dead loop on virtual device ip6_vti0, fix it urgently! [ 466.282933][ T5930] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.294261][ T5930] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 466.304088][ T5930] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 466.313169][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.325276][ T5930] usb 9-1: config 0 descriptor?? [ 466.698638][ T5929] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 466.770101][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.780739][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.816348][ T5930] Bluetooth: Can't get state to change to load configuration err [ 466.824122][ T5930] Bluetooth: Loading sysconfig file failed [ 466.837715][ T5929] usb 10-1: device descriptor read/64, error -71 [ 466.855656][ T5930] ath3k 9-1:0.0: probe with driver ath3k failed with error -16 [ 466.865384][ T5930] usb 9-1: USB disconnect, device number 127 [ 467.094271][ T5929] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 467.243945][ T5929] usb 10-1: device descriptor read/64, error -71 [ 467.362401][ T5929] usb usb10-port1: attempt power cycle [ 467.725236][ T5929] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 467.725236][ T24] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 467.758521][ T5929] usb 10-1: device descriptor read/8, error -71 [ 467.864495][ T24] usb 9-1: device descriptor read/64, error -71 [ 467.928208][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.014016][ T5929] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 468.036022][ T5929] usb 10-1: device descriptor read/8, error -71 [ 468.121316][ T12] IPVS: sh: FWM 3 0x00000003 - no destination available [ 468.123868][ T24] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 468.153269][ T5929] usb usb10-port1: unable to enumerate USB device [ 468.270609][ T24] usb 9-1: device descriptor read/64, error -71 [ 468.389907][ T24] usb usb9-port1: attempt power cycle [ 468.752273][ T24] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 468.774197][ T24] usb 9-1: device descriptor read/8, error -71 [ 469.040631][ T24] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 469.074597][ T24] usb 9-1: device descriptor read/8, error -71 [ 469.191748][ T24] usb usb9-port1: unable to enumerate USB device [ 469.379247][T13443] ubi31: attaching mtd0 [ 469.388221][T13443] ubi31: scanning is finished [ 469.393008][T13443] ubi31: empty MTD device detected [ 469.537054][T13443] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 469.544857][T13443] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 469.552261][T13443] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 469.560098][T13443] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 469.568583][T13443] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 469.576625][T13443] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 469.584772][T13443] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 95100015 [ 469.596051][T13443] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 469.609385][T13444] ubi31: background thread "ubi_bgt31d" started, PID 13444 [ 469.808894][T13449] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1975'. [ 469.874396][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1976'. [ 470.216931][ T5930] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 470.398675][ T5930] usb 10-1: Using ep0 maxpacket: 8 [ 470.407870][ T5930] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 470.417128][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.425568][ T5930] usb 10-1: Product: syz [ 470.429835][ T5930] usb 10-1: Manufacturer: syz [ 470.434852][ T5930] usb 10-1: SerialNumber: syz [ 470.441610][ T5930] usb 10-1: config 0 descriptor?? [ 470.450650][ T5930] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 470.711709][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1978'. [ 471.314022][ T5930] gspca_sonixj: reg_w1 err -71 [ 471.403900][ T5930] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 471.414547][ T5930] usb 10-1: USB disconnect, device number 74 [ 471.763316][T13471] @: renamed from vlan0 [ 471.974603][T13477] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 472.024907][ T5930] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 472.126805][T13481] overlayfs: overlapping lowerdir path [ 472.127063][T13482] overlayfs: overlapping lowerdir path [ 472.185434][ T5930] usb 9-1: Using ep0 maxpacket: 32 [ 472.197858][ T5930] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.211761][ T5930] usb 9-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 472.223258][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.231506][ T5930] usb 9-1: Product: syz [ 472.235693][ T5930] usb 9-1: Manufacturer: syz [ 472.240651][ T5930] usb 9-1: SerialNumber: syz [ 472.249908][ T5930] usb 9-1: config 0 descriptor?? [ 472.263688][ T5930] snd_usb_variax 9-1:0.0: Line 6 Variax Workbench found [ 472.280595][ T5930] usb 9-1: selecting invalid altsetting 1 [ 472.286594][ T5930] snd_usb_variax 9-1:0.0: set_interface failed [ 472.298948][ T5930] snd_usb_variax 9-1:0.0: Line 6 Variax Workbench now disconnected [ 472.309303][ T5930] snd_usb_variax 9-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 472.472577][ T5930] usb 9-1: USB disconnect, device number 6 [ 472.637475][T13500] netlink: 'syz.9.1993': attribute type 12 has an invalid length. [ 472.812094][T13506] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.812375][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 472.841844][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 472.856174][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 472.866113][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.875331][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.932685][T13506] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.956285][T13507] lo speed is unknown, defaulting to 1000 [ 473.000836][T13506] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.107597][T13506] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.229198][T13507] chnl_net:caif_netlink_parms(): no params data found [ 473.305216][ T2978] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.344257][ T2978] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.353312][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.360667][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.368573][T13507] bridge_slave_0: entered allmulticast mode [ 473.377403][T13507] bridge_slave_0: entered promiscuous mode [ 473.383427][ T5867] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 473.397569][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.405251][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.412518][T13507] bridge_slave_1: entered allmulticast mode [ 473.420344][T13507] bridge_slave_1: entered promiscuous mode [ 473.442732][ T2978] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.472479][ T2978] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.486154][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.498235][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.533615][T13507] team0: Port device team_slave_0 added [ 473.541458][T13507] team0: Port device team_slave_1 added [ 473.548961][ T5867] usb 9-1: config 241 has an invalid interface descriptor of length 8, skipping [ 473.558453][ T5867] usb 9-1: config 241 has an invalid descriptor of length 0, skipping remainder of the config [ 473.570358][ T5867] usb 9-1: config 241 has 0 interfaces, different from the descriptor's value: 1 [ 473.579606][ T5867] usb 9-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 473.596647][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.618885][ T5867] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 473.621005][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.628016][ T5867] usb 9-1: no configuration chosen from 1 choice [ 473.641698][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.669038][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.685356][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.693003][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.721882][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.730714][T13521] Malformed UNC in devname [ 473.730714][T13521] [ 473.739762][T13521] CIFS: VFS: Malformed UNC in devname [ 473.820496][T13507] hsr_slave_0: entered promiscuous mode [ 473.829215][T13507] hsr_slave_1: entered promiscuous mode [ 473.836103][T13507] debugfs: 'hsr0' already exists in 'hsr' [ 473.845723][T13507] Cannot create hsr debugfs directory [ 474.011938][T13530] loop3: detected capacity change from 0 to 231 [ 474.026620][T13530] loop3: unable to read partition table [ 474.032632][T13530] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 474.165936][T13507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.269623][T13507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.278400][ T36] IPVS: sh: FWM 3 0x00000003 - no destination available [ 474.354761][T13507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.438487][T13507] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.451649][ T5913] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 474.622085][T13507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 474.641074][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 474.643604][T13507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 474.652215][ T5913] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 474.652247][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 474.654969][ T5913] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 474.691111][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.695618][T13507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 474.699528][ T5913] usb 10-1: Product: syz [ 474.699548][ T5913] usb 10-1: Manufacturer: syz [ 474.699562][ T5913] usb 10-1: SerialNumber: syz [ 474.726499][T13507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 474.730224][ T5913] usb 10-1: config 0 descriptor?? [ 474.739098][T13535] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 474.746764][T13535] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 474.756593][ T5913] usb 10-1: ucan: probing device on interface #0 [ 474.820700][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.847032][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.862510][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.869741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.886586][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.893798][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.107460][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.126222][ T5841] Bluetooth: hci6: command tx timeout [ 475.162749][T13507] veth0_vlan: entered promiscuous mode [ 475.177491][T13507] veth1_vlan: entered promiscuous mode [ 475.242655][T13507] veth0_macvtap: entered promiscuous mode [ 475.258201][T13507] veth1_macvtap: entered promiscuous mode [ 475.287328][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.309404][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.327775][ T3593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.355276][ T3593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.407885][ T3593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.421942][ T3593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.473091][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.485606][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.526744][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.535458][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.574093][ T5913] usb 10-1: ucan: failed to retrieve device info [ 475.583963][ T5913] usb 10-1: ucan: probe failed; try to update the device firmware [ 475.617659][ T5913] usb 10-1: USB disconnect, device number 75 [ 475.650391][T10878] block nbd1: Possible stuck request ffff888025d87000: control (read@0,4096B). Runtime 120 seconds [ 475.970276][ T7346] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 476.130509][ T7346] usb 4-1: Using ep0 maxpacket: 16 [ 476.137728][ T7346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.150175][ T7346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.160725][ T7346] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 476.170392][ T7346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.180831][ T7346] usb 4-1: config 0 descriptor?? [ 476.377775][ T5929] usb 9-1: USB disconnect, device number 7 [ 476.510147][T13559] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 476.801433][ T5841] Bluetooth: hci2: unexpected event for opcode 0x080e [ 476.851624][T13552] fuse: Bad value for 'fd' [ 476.859928][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.868712][ T7346] usbhid 4-1:0.0: can't add hid device: -32 [ 476.870761][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.874717][ T7346] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 476.909517][ T7346] usb 4-1: USB disconnect, device number 81 [ 477.350088][ T5841] Bluetooth: hci6: command tx timeout [ 477.492906][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 477.627889][ T7346] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 477.652762][T13592] Invalid option length (0) for dns_resolver key [ 477.800763][ T7346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.812228][ T7346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.825648][ T7346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.836313][ T7346] usb 4-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 477.849453][ T7346] usb 4-1: config 1 interface 1 has no altsetting 0 [ 477.871274][ T7346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.892128][ T7346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.902928][ T7346] usb 4-1: Product: syz [ 477.907784][ T7346] usb 4-1: Manufacturer: syz [ 477.912400][ T7346] usb 4-1: SerialNumber: syz [ 477.924148][ T7346] usb 4-1: selecting invalid altsetting 0 [ 477.930485][ T7346] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 477.941733][ T7346] usb 4-1: selecting invalid altsetting 0 [ 477.947476][ T7346] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 478.113521][T13601] netlink: 'syz.9.2018': attribute type 101 has an invalid length. [ 478.126611][T13601] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2018'. [ 478.142147][ T7346] usb 4-1: USB disconnect, device number 82 [ 479.574500][ T5841] Bluetooth: hci6: command tx timeout [ 479.894872][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 480.119292][ T9] usb 4-1: device descriptor read/64, error -71 [ 480.203341][ T5930] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 480.376536][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 480.431847][ T57] IPVS: sh: FWM 3 0x00000003 - no destination available [ 480.472183][ T5930] usb 9-1: Using ep0 maxpacket: 16 [ 480.600812][ T9] usb 4-1: device descriptor read/64, error -71 [ 480.611834][ T5930] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 480.620914][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.739501][ T5930] usb 9-1: Product: syz [ 480.745010][ T5930] usb 9-1: Manufacturer: syz [ 480.749634][ T5930] usb 9-1: SerialNumber: syz [ 480.772452][ T9] usb usb4-port1: attempt power cycle [ 480.868845][ T5930] usb 9-1: config 0 descriptor?? [ 480.931600][ T5930] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 481.040281][ T5930] usb 9-1: Detected FT-X [ 481.119250][ T5930] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 481.203247][ T5930] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 481.210450][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 481.288307][ T5930] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 481.302319][ T9] usb 4-1: device descriptor read/8, error -71 [ 481.364299][ T5930] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 481.476301][ T5930] usb 9-1: USB disconnect, device number 8 [ 481.609281][ T5930] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 481.628372][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 481.713651][ T5930] ftdi_sio 9-1:0.0: device disconnected [ 481.728819][ T9] usb 4-1: device descriptor read/8, error -71 [ 481.809185][ T5841] Bluetooth: hci6: command tx timeout [ 481.906561][ T9] usb usb4-port1: unable to enumerate USB device [ 482.954134][T13666] FAULT_INJECTION: forcing a failure. [ 482.954134][T13666] name failslab, interval 1, probability 0, space 0, times 1 [ 483.009778][T13666] CPU: 1 UID: 0 PID: 13666 Comm: syz.2.2035 Not tainted syzkaller #0 PREEMPT(full) [ 483.009806][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 483.009831][T13666] Call Trace: [ 483.009839][T13666] [ 483.009849][T13666] dump_stack_lvl+0x189/0x250 [ 483.009876][T13666] ? irqentry_exit+0x74/0x90 [ 483.009905][T13666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.009945][T13666] should_fail_ex+0x414/0x560 [ 483.009980][T13666] should_failslab+0xa8/0x100 [ 483.010003][T13666] __kmalloc_noprof+0xdf/0x800 [ 483.010033][T13666] ? tomoyo_encode+0x28b/0x550 [ 483.010066][T13666] tomoyo_encode+0x28b/0x550 [ 483.010098][T13666] tomoyo_realpath_from_path+0x58d/0x5d0 [ 483.010138][T13666] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 483.010162][T13666] tomoyo_path_number_perm+0x1e8/0x5a0 [ 483.010188][T13666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.010251][T13666] ? __fget_files+0x2a/0x420 [ 483.010283][T13666] ? __fget_files+0x3a0/0x420 [ 483.010308][T13666] ? __fget_files+0x2a/0x420 [ 483.010336][T13666] security_file_ioctl+0xcb/0x2d0 [ 483.010356][T13666] __se_sys_ioctl+0x47/0x170 [ 483.010378][T13666] do_syscall_64+0xfa/0xfa0 [ 483.010401][T13666] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.010425][T13666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.010443][T13666] ? clear_bhb_loop+0x60/0xb0 [ 483.010466][T13666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.010484][T13666] RIP: 0033:0x7f24f818efc9 [ 483.010503][T13666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.010518][T13666] RSP: 002b:00007f24f8f83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.010540][T13666] RAX: ffffffffffffffda RBX: 00007f24f83e5fa0 RCX: 00007f24f818efc9 [ 483.010554][T13666] RDX: 0000000000000000 RSI: 000000008050640a RDI: 0000000000000003 [ 483.010566][T13666] RBP: 00007f24f8f83090 R08: 0000000000000000 R09: 0000000000000000 [ 483.010579][T13666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.010591][T13666] R13: 00007f24f83e6038 R14: 00007f24f83e5fa0 R15: 00007ffdc7af6418 [ 483.010625][T13666] [ 483.010710][T13666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.273994][ T9] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 483.437500][ T9] usb 10-1: config 8 has an invalid interface number: 127 but max is 0 [ 483.464235][ T9] usb 10-1: config 8 has no interface number 0 [ 483.499930][ T9] usb 10-1: config 8 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 483.563653][ T9] usb 10-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=45.36 [ 483.592256][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.648567][ T9] usb 10-1: Product: syz [ 483.652872][ T9] usb 10-1: Manufacturer: syz [ 483.699125][ T9] usb 10-1: SerialNumber: syz [ 483.868311][T13674] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.886944][ T24] IPVS: starting estimator thread 0... [ 483.991430][T13680] IPVS: using max 28 ests per chain, 67200 per kthread [ 484.021511][ T9] io_ti 10-1:8.127: required endpoints missing [ 484.070373][ T9] usb 10-1: USB disconnect, device number 76 [ 484.097396][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 484.282754][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 484.306330][ T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 484.386341][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.427584][ T24] usb 4-1: Product: syz [ 484.482858][ T24] usb 4-1: Manufacturer: syz [ 484.487499][ T24] usb 4-1: SerialNumber: syz [ 484.517367][ T24] usb 4-1: config 0 descriptor?? [ 484.576963][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 484.886221][ T5913] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 485.113302][ T5913] usb 9-1: config 0 has no interfaces? [ 485.119536][ T5913] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 485.199730][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.247146][ T5913] usb 9-1: config 0 descriptor?? [ 485.386571][T13693] lo speed is unknown, defaulting to 1000 [ 485.678892][T13676] syzkaller1: entered promiscuous mode [ 485.702979][T13700] FAULT_INJECTION: forcing a failure. [ 485.702979][T13700] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 485.704470][T13676] syzkaller1: entered allmulticast mode [ 485.759869][T13700] CPU: 0 UID: 0 PID: 13700 Comm: syz.9.2045 Not tainted syzkaller #0 PREEMPT(full) [ 485.759899][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 485.759912][T13700] Call Trace: [ 485.759919][T13700] [ 485.759928][T13700] dump_stack_lvl+0x189/0x250 [ 485.759956][T13700] ? __pfx____ratelimit+0x10/0x10 [ 485.759981][T13700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.760004][T13700] ? __pfx__printk+0x10/0x10 [ 485.760026][T13700] ? __might_fault+0xb0/0x130 [ 485.760064][T13700] should_fail_ex+0x414/0x560 [ 485.760091][T13700] _copy_from_user+0x2d/0xb0 [ 485.760123][T13700] comedi_unlocked_ioctl+0x581/0x1020 [ 485.760149][T13700] ? kasan_quarantine_put+0xdd/0x220 [ 485.760187][T13700] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 485.760213][T13700] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 485.760242][T13700] ? do_vfs_ioctl+0xbe8/0x1430 [ 485.760263][T13700] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 485.760287][T13700] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 485.760348][T13700] ? __fget_files+0x2a/0x420 [ 485.760379][T13700] ? __fget_files+0x3a0/0x420 [ 485.760412][T13700] ? __fget_files+0x2a/0x420 [ 485.760441][T13700] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.760465][T13700] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 485.760491][T13700] __se_sys_ioctl+0xfc/0x170 [ 485.760515][T13700] do_syscall_64+0xfa/0xfa0 [ 485.760540][T13700] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.760566][T13700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.760586][T13700] ? clear_bhb_loop+0x60/0xb0 [ 485.760611][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.760631][T13700] RIP: 0033:0x7fa6a918efc9 [ 485.760649][T13700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.760667][T13700] RSP: 002b:00007fa6aa046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.760688][T13700] RAX: ffffffffffffffda RBX: 00007fa6a93e5fa0 RCX: 00007fa6a918efc9 [ 485.760704][T13700] RDX: 0000000000000000 RSI: 000000008050640a RDI: 0000000000000003 [ 485.760716][T13700] RBP: 00007fa6aa046090 R08: 0000000000000000 R09: 0000000000000000 [ 485.760729][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.760741][T13700] R13: 00007fa6a93e6038 R14: 00007fa6a93e5fa0 R15: 00007ffe05f73528 [ 485.760774][T13700] [ 486.000617][ T24] gspca_ov534_9: reg_w failed -110 [ 486.311830][ T24] gspca_ov534_9: Unknown sensor 0000 [ 486.311927][ T24] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 486.375992][ T24] usb 4-1: USB disconnect, device number 87 [ 486.514230][ T5867] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 486.599459][ T3489] IPVS: sh: FWM 3 0x00000003 - no destination available [ 486.696857][ T5867] usb 10-1: Using ep0 maxpacket: 16 [ 486.734576][ T5867] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.792767][ T5867] usb 10-1: config 0 interface 0 has no altsetting 0 [ 486.837387][T13706] lo speed is unknown, defaulting to 1000 [ 486.869099][ T5867] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 486.903559][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.974163][ T5867] usb 10-1: Product: syz [ 486.989498][ T5867] usb 10-1: Manufacturer: syz [ 486.994372][ T5867] usb 10-1: SerialNumber: syz [ 487.073895][ T5867] usb 10-1: config 0 descriptor?? [ 487.174827][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.231877][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.359795][ T5867] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input64 [ 487.423365][ T5930] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 487.607567][ T5930] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 487.661895][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 487.727760][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 487.764300][ T5930] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 487.831727][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.875480][ T5867] rc_core: IR keymap rc-imon-pad not found [ 487.884198][ T5930] usb 4-1: config 0 descriptor?? [ 487.894814][T13709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.898930][ T5867] Registered IR keymap rc-empty [ 487.937110][ T5867] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 488.003303][ T5867] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 488.119995][ T5867] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 488.197909][ T5867] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input65 [ 488.248894][ T5867] imon 10-1:0.0: iMON device (15c2:0041, intf0) on usb<10:77> initialized [ 488.399223][ T5930] wacom 0003:056A:00B3.0038: unknown main item tag 0x0 [ 488.419811][ T5930] wacom 0003:056A:00B3.0038: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 488.470561][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 488.478454][ T798] usb 10-1: USB disconnect, device number 77 [ 488.489729][ T5930] wacom 0003:056A:00B3.0038: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.3-1/input0 [ 488.591425][ T5930] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B3.0038/input/input66 [ 488.643760][T10878] block nbd4: Possible stuck request ffff888025e90000: control (read@0,1024B). Runtime 360 seconds [ 488.656696][T10878] block nbd4: Possible stuck request ffff888025e901c0: control (read@1024,1024B). Runtime 360 seconds [ 488.668099][T10878] block nbd4: Possible stuck request ffff888025e90380: control (read@2048,1024B). Runtime 360 seconds [ 488.685021][T10878] block nbd4: Possible stuck request ffff888025e90540: control (read@3072,1024B). Runtime 360 seconds [ 488.973871][ T5930] usb 4-1: USB disconnect, device number 88 [ 489.300231][T13722] Bluetooth: MGMT ver 1.23 [ 489.395317][T13722] team0: No ports can be present during mode change [ 489.596308][T13726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2052'. [ 489.686031][T13626] syz.8.2023 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 489.722535][T13626] CPU: 1 UID: 0 PID: 13626 Comm: syz.8.2023 Not tainted syzkaller #0 PREEMPT(full) [ 489.722562][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.722575][T13626] Call Trace: [ 489.722582][T13626] [ 489.722591][T13626] dump_stack_lvl+0x189/0x250 [ 489.722621][T13626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.722645][T13626] ? __pfx__printk+0x10/0x10 [ 489.722681][T13626] dump_header+0xd3/0x480 [ 489.722710][T13626] oom_kill_process+0x263/0x800 [ 489.722745][T13626] out_of_memory+0xf09/0x12a0 [ 489.722788][T13626] ? __pfx_out_of_memory+0x10/0x10 [ 489.722828][T13626] mem_cgroup_out_of_memory+0x145/0x240 [ 489.722859][T13626] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 489.722901][T13626] ? _raw_spin_unlock+0x28/0x50 [ 489.722925][T13626] ? memcg1_oom_prepare+0x37f/0x450 [ 489.722951][T13626] try_charge_memcg+0xdf0/0x1280 [ 489.722994][T13626] ? __pfx_try_charge_memcg+0x10/0x10 [ 489.723020][T13626] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 489.723056][T13626] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 489.723091][T13626] charge_memcg+0x9f/0x180 [ 489.723118][T13626] __mem_cgroup_charge+0x25/0x80 [ 489.723143][T13626] shmem_alloc_and_add_folio+0x790/0xf40 [ 489.723177][T13626] ? filemap_get_entry+0xad/0x2f0 [ 489.723194][T13626] ? filemap_get_entry+0xad/0x2f0 [ 489.723213][T13626] ? filemap_get_entry+0x28f/0x2f0 [ 489.723235][T13626] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 489.723267][T13626] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 489.723308][T13626] shmem_get_folio_gfp+0x59d/0x1660 [ 489.723347][T13626] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 489.723379][T13626] shmem_write_begin+0xf7/0x2b0 [ 489.723414][T13626] generic_perform_write+0x2c5/0x900 [ 489.723451][T13626] ? __pfx_generic_perform_write+0x10/0x10 [ 489.723471][T13626] ? down_write+0x162/0x1f0 [ 489.723506][T13626] ? file_update_time+0x2da/0x490 [ 489.723531][T13626] shmem_file_write_iter+0xf8/0x120 [ 489.723558][T13626] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 489.723588][T13626] __kernel_write_iter+0x428/0x910 [ 489.723613][T13626] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 489.723642][T13626] ? __pfx___kernel_write_iter+0x10/0x10 [ 489.723673][T13626] ? __asan_memset+0x22/0x50 [ 489.723700][T13626] ? iov_iter_bvec+0xb8/0x180 [ 489.723731][T13626] dump_user_range+0x8a0/0xc90 [ 489.723771][T13626] ? __pfx_dump_user_range+0x10/0x10 [ 489.723796][T13626] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 489.723833][T13626] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 489.723872][T13626] ? dump_emit+0xa6/0xe0 [ 489.723895][T13626] ? elf_core_dump+0x2cd0/0x3960 [ 489.723944][T13626] elf_core_dump+0x3369/0x3960 [ 489.723992][T13626] ? __pfx_elf_core_dump+0x10/0x10 [ 489.724020][T13626] ? kasan_save_track+0x4f/0x80 [ 489.724046][T13626] ? kasan_save_track+0x3e/0x80 [ 489.724071][T13626] ? __kasan_kmalloc+0x93/0xb0 [ 489.724088][T13626] ? __kvmalloc_node_noprof+0x5d9/0x910 [ 489.724104][T13626] ? coredump_write+0x343/0x1900 [ 489.724129][T13626] ? vfs_coredump+0x1db5/0x2a60 [ 489.724151][T13626] ? get_signal+0x1108/0x1340 [ 489.724168][T13626] ? arch_do_signal_or_restart+0xa0/0x790 [ 489.724194][T13626] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 489.724219][T13626] ? exc_page_fault+0xab/0x100 [ 489.724241][T13626] ? asm_exc_page_fault+0x26/0x30 [ 489.724317][T13626] ? 0xffffffffff600000 [ 489.724341][T13626] ? up_write+0x1c4/0x420 [ 489.724370][T13626] coredump_write+0x116c/0x1900 [ 489.724417][T13626] ? __pfx_coredump_write+0x10/0x10 [ 489.724451][T13626] ? kfree+0x4d/0x6d0 [ 489.724484][T13626] ? unshare_files+0xa9/0x140 [ 489.724511][T13626] vfs_coredump+0x1db5/0x2a60 [ 489.724561][T13626] ? __pfx_vfs_coredump+0x10/0x10 [ 489.724595][T13626] ? __lock_acquire+0xab9/0xd20 [ 489.724638][T13626] ? __lock_acquire+0xab9/0xd20 [ 489.724673][T13626] ? is_bpf_text_address+0x26/0x2b0 [ 489.724707][T13626] ? is_bpf_text_address+0x26/0x2b0 [ 489.724734][T13626] ? is_bpf_text_address+0x292/0x2b0 [ 489.724754][T13626] ? is_bpf_text_address+0x26/0x2b0 [ 489.724779][T13626] ? kernel_text_address+0xa5/0xe0 [ 489.724807][T13626] ? __kernel_text_address+0xd/0x40 [ 489.724832][T13626] ? unwind_get_return_address+0x4d/0x90 [ 489.724854][T13626] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.724879][T13626] ? arch_stack_walk+0xfc/0x150 [ 489.724913][T13626] ? stack_trace_save+0x9c/0xe0 [ 489.724940][T13626] ? stack_depot_save_flags+0x40/0x860 [ 489.724971][T13626] ? kasan_save_track+0x4f/0x80 [ 489.724997][T13626] ? kasan_save_track+0x3e/0x80 [ 489.725023][T13626] ? kasan_save_free_info+0x46/0x50 [ 489.725045][T13626] ? __kasan_slab_free+0x5c/0x80 [ 489.725060][T13626] ? kmem_cache_free+0x19b/0x690 [ 489.725087][T13626] ? get_signal+0xa4b/0x1340 [ 489.725103][T13626] ? arch_do_signal_or_restart+0xa0/0x790 [ 489.725127][T13626] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 489.725148][T13626] ? exc_page_fault+0xab/0x100 [ 489.725168][T13626] ? asm_exc_page_fault+0x26/0x30 [ 489.725244][T13626] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.725267][T13626] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.725301][T13626] get_signal+0x1108/0x1340 [ 489.725343][T13626] arch_do_signal_or_restart+0xa0/0x790 [ 489.725374][T13626] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 489.725402][T13626] ? __bad_area_nosemaphore+0x3fb/0x780 [ 489.725437][T13626] ? local_irq_enable_exit_to_user+0x5/0x10 [ 489.725472][T13626] irqentry_exit_to_user_mode+0x7e/0x110 [ 489.725500][T13626] exc_page_fault+0xab/0x100 [ 489.725526][T13626] asm_exc_page_fault+0x26/0x30 [ 489.725544][T13626] RIP: 0033:0x7f408c04f987 [ 489.725562][T13626] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 489.725579][T13626] RSP: 002b:00007f408d085120 EFLAGS: 00010202 [ 489.725597][T13626] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f408c18efc9 [ 489.725609][T13626] RDX: 00007f408d085140 RSI: 00007f408d085270 RDI: 000000000000000b [ 489.725622][T13626] RBP: 00007f408c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 489.725634][T13626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 489.725647][T13626] R13: 00007f408c3e6218 R14: 00007f408c3e6180 R15: 00007ffd22158688 [ 489.725681][T13626] [ 489.725690][T13626] memory: usage 307200kB, limit 307200kB, failcnt 18656 [ 489.781539][T13726] syzkaller1: entered promiscuous mode [ 489.801249][T13626] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 489.813175][T13726] syzkaller1: entered allmulticast mode [ 489.832530][T13626] kmem: usage 6288kB, limit 9007199254740988kB, failcnt 0 [ 489.855948][T13732] FAULT_INJECTION: forcing a failure. [ 489.855948][T13732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.865837][T13626] Memory cgroup stats for [ 489.879446][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.9.2054 Not tainted syzkaller #0 PREEMPT(full) [ 489.879476][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.879488][T13732] Call Trace: [ 489.879495][T13732] [ 489.879503][T13732] dump_stack_lvl+0x189/0x250 [ 489.879531][T13732] ? __pfx____ratelimit+0x10/0x10 [ 489.879555][T13732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.879577][T13732] ? __pfx__printk+0x10/0x10 [ 489.879611][T13732] should_fail_ex+0x414/0x560 [ 489.879639][T13732] _copy_to_user+0x31/0xb0 [ 489.879667][T13732] simple_read_from_buffer+0xe1/0x170 [ 489.879697][T13732] proc_fail_nth_read+0x1b3/0x220 [ 489.879722][T13732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.879746][T13732] ? rw_verify_area+0x2a6/0x4d0 [ 489.879766][T13732] ? __lock_acquire+0xab9/0xd20 [ 489.879792][T13732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.879815][T13732] vfs_read+0x200/0xa30 [ 489.879835][T13732] ? fdget_pos+0x247/0x320 [ 489.879863][T13732] ? __pfx___mutex_lock+0x10/0x10 [ 489.879891][T13732] ? __pfx_vfs_read+0x10/0x10 [ 489.879913][T13732] ? __fget_files+0x2a/0x420 [ 489.879942][T13732] ? __fget_files+0x3a0/0x420 [ 489.879966][T13732] ? __fget_files+0x2a/0x420 [ 489.879999][T13732] ksys_read+0x145/0x250 [ 489.880018][T13732] ? __fget_files+0x2a/0x420 [ 489.880050][T13732] ? __pfx_ksys_read+0x10/0x10 [ 489.880075][T13732] ? do_syscall_64+0xbe/0xfa0 [ 489.880103][T13732] do_syscall_64+0xfa/0xfa0 [ 489.880126][T13732] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.880151][T13732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.880170][T13732] ? clear_bhb_loop+0x60/0xb0 [ 489.880193][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.880212][T13732] RIP: 0033:0x7fa6a918d9dc [ 489.880229][T13732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.880245][T13732] RSP: 002b:00007fa6aa046030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.880266][T13732] RAX: ffffffffffffffda RBX: 00007fa6a93e5fa0 RCX: 00007fa6a918d9dc [ 489.880280][T13732] RDX: 000000000000000f RSI: 00007fa6aa0460a0 RDI: 0000000000000004 [ 489.880292][T13732] RBP: 00007fa6aa046090 R08: 0000000000000000 R09: 0000000000000000 [ 489.880304][T13732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.880316][T13732] R13: 00007fa6a93e6038 R14: 00007fa6a93e5fa0 R15: 00007ffe05f73528 [ 489.880347][T13732] [ 490.640339][T13626] /syz8: [ 490.640542][T13626] cache 307359744 [ 490.647249][T13626] rss 765952 [ 490.647262][T13626] rss_huge 0 [ 490.647271][T13626] shmem 307359744 [ 490.647280][T13626] mapped_file 0 [ 490.647288][T13626] dirty 0 [ 490.647296][T13626] writeback 0 [ 490.647305][T13626] workingset_refault_anon 8 [ 490.647314][T13626] workingset_refault_file 0 [ 490.647324][T13626] swap 127971328 [ 490.647332][T13626] swapcached 24576 [ 490.647341][T13626] pgpgin 181067 [ 490.647349][T13626] pgpgout 105964 [ 490.647358][T13626] pgfault 52534 [ 490.647366][T13626] pgmajfault 11 [ 490.647375][T13626] inactive_anon 179613696 [ 490.647385][T13626] active_anon 128512000 [ 490.647394][T13626] inactive_file 0 [ 490.647404][T13626] active_file 0 [ 490.647412][T13626] unevictable 0 [ 490.647421][T13626] hierarchical_memory_limit 314572800 [ 490.647431][T13626] hierarchical_memsw_limit 9223372036854771712 [ 490.647442][T13626] total_cache 307359744 [ 490.647450][T13626] total_rss 765952 [ 490.647459][T13626] total_rss_huge 0 [ 490.647468][T13626] total_shmem 307359744 [ 490.647477][T13626] total_mapped_file 0 [ 490.647485][T13626] total_dirty 0 [ 490.647494][T13626] total_writeback 0 [ 490.647501][T13626] total_workingset_refault_anon 8 [ 490.647509][T13626] total_workingset_refault_file 0 [ 490.647517][T13626] total_swap 127971328 [ 490.647526][T13626] total_swapcached 24576 [ 490.647533][T13626] total_pgpgin 181067 [ 490.647541][T13626] total_pgpgout 105964 [ 490.647548][T13626] total_pgfault 52534 [ 490.647556][T13626] total_pgmajfault 11 [ 490.647563][T13626] total_inactive_anon 179613696 [ 490.647571][T13626] total_active_anon 128512000 [ 490.647579][T13626] total_inactive_file 0 [ 490.647585][T13626] total_active_file 0 [ 490.647592][T13626] total_unevictable 0 [ 490.647598][T13626] anon_cost 0 [ 490.647605][T13626] file_cost 0 [ 490.647612][T13626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2023,pid=13622,uid=0 [ 490.649849][T13626] Memory cgroup out of memory: Killed process 13622 (syz.8.2023) total-vm:98444kB, anon-rss:1160kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 490.863424][T13635] syz.8.2023 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 490.863465][T13635] CPU: 1 UID: 0 PID: 13635 Comm: syz.8.2023 Not tainted syzkaller #0 PREEMPT(full) [ 490.863488][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.863502][T13635] Call Trace: [ 490.863510][T13635] [ 490.863520][T13635] dump_stack_lvl+0x189/0x250 [ 490.863553][T13635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.863577][T13635] ? __pfx__printk+0x10/0x10 [ 490.863614][T13635] dump_header+0xd3/0x480 [ 490.863644][T13635] oom_kill_process+0x263/0x800 [ 490.863680][T13635] out_of_memory+0xf09/0x12a0 [ 490.863723][T13635] ? __pfx_out_of_memory+0x10/0x10 [ 490.863765][T13635] mem_cgroup_out_of_memory+0x145/0x240 [ 490.863797][T13635] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 490.863839][T13635] ? _raw_spin_unlock+0x28/0x50 [ 490.863862][T13635] ? memcg1_oom_prepare+0x37f/0x450 [ 490.863889][T13635] try_charge_memcg+0xdf0/0x1280 [ 490.863931][T13635] ? __pfx_try_charge_memcg+0x10/0x10 [ 490.863958][T13635] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 490.863996][T13635] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 490.864032][T13635] charge_memcg+0x9f/0x180 [ 490.864059][T13635] __mem_cgroup_charge+0x25/0x80 [ 490.864084][T13635] shmem_alloc_and_add_folio+0x790/0xf40 [ 490.864119][T13635] ? filemap_get_entry+0xad/0x2f0 [ 490.864136][T13635] ? filemap_get_entry+0xad/0x2f0 [ 490.864166][T13635] ? filemap_get_entry+0x28f/0x2f0 [ 490.864188][T13635] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 490.864221][T13635] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 490.864255][T13635] shmem_get_folio_gfp+0x59d/0x1660 [ 490.864295][T13635] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 490.864326][T13635] shmem_write_begin+0xf7/0x2b0 [ 490.864362][T13635] generic_perform_write+0x2c5/0x900 [ 490.864399][T13635] ? __pfx_generic_perform_write+0x10/0x10 [ 490.864421][T13635] ? down_write+0x162/0x1f0 [ 490.864456][T13635] ? file_update_time+0x2da/0x490 [ 490.864482][T13635] shmem_file_write_iter+0xf8/0x120 [ 490.864508][T13635] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 490.864539][T13635] __kernel_write_iter+0x428/0x910 [ 490.864564][T13635] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 490.864594][T13635] ? __pfx___kernel_write_iter+0x10/0x10 [ 490.864625][T13635] ? __asan_memset+0x22/0x50 [ 490.864653][T13635] ? iov_iter_bvec+0xb8/0x180 [ 490.864684][T13635] dump_user_range+0x8a0/0xc90 [ 490.864726][T13635] ? __pfx_dump_user_range+0x10/0x10 [ 490.864752][T13635] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 490.864791][T13635] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 490.864830][T13635] ? dump_emit+0xa6/0xe0 [ 490.864854][T13635] ? elf_core_dump+0x2cd0/0x3960 [ 490.864886][T13635] elf_core_dump+0x3369/0x3960 [ 490.864936][T13635] ? __pfx_elf_core_dump+0x10/0x10 [ 490.864965][T13635] ? kasan_save_track+0x4f/0x80 [ 490.864992][T13635] ? kasan_save_track+0x3e/0x80 [ 490.865018][T13635] ? __kasan_kmalloc+0x93/0xb0 [ 490.865034][T13635] ? __kvmalloc_node_noprof+0x5d9/0x910 [ 490.865052][T13635] ? coredump_write+0x343/0x1900 [ 490.865077][T13635] ? vfs_coredump+0x1db5/0x2a60 [ 490.865100][T13635] ? get_signal+0x1108/0x1340 [ 490.865117][T13635] ? arch_do_signal_or_restart+0xa0/0x790 [ 490.865144][T13635] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 490.865174][T13635] ? exc_page_fault+0xab/0x100 [ 490.865196][T13635] ? asm_exc_page_fault+0x26/0x30 [ 490.865269][T13635] ? 0xffffffffff600000 [ 490.865294][T13635] ? up_write+0x1c4/0x420 [ 490.865324][T13635] coredump_write+0x116c/0x1900 [ 490.865372][T13635] ? __pfx_coredump_write+0x10/0x10 [ 490.865407][T13635] ? kfree+0x4d/0x6d0 [ 490.865439][T13635] ? unshare_files+0xa9/0x140 [ 490.865467][T13635] vfs_coredump+0x1db5/0x2a60 [ 490.865518][T13635] ? __pfx_vfs_coredump+0x10/0x10 [ 490.865553][T13635] ? __lock_acquire+0xab9/0xd20 [ 490.865596][T13635] ? __lock_acquire+0xab9/0xd20 [ 490.865632][T13635] ? is_bpf_text_address+0x26/0x2b0 [ 490.865667][T13635] ? is_bpf_text_address+0x26/0x2b0 [ 490.865694][T13635] ? is_bpf_text_address+0x292/0x2b0 [ 490.865714][T13635] ? is_bpf_text_address+0x26/0x2b0 [ 490.865740][T13635] ? kernel_text_address+0xa5/0xe0 [ 490.865768][T13635] ? __kernel_text_address+0xd/0x40 [ 490.865797][T13635] ? unwind_get_return_address+0x4d/0x90 [ 490.865817][T13635] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 490.865842][T13635] ? arch_stack_walk+0xfc/0x150 [ 490.865877][T13635] ? stack_trace_save+0x9c/0xe0 [ 490.865903][T13635] ? stack_depot_save_flags+0x40/0x860 [ 490.865936][T13635] ? kasan_save_track+0x4f/0x80 [ 490.865962][T13635] ? kasan_save_track+0x3e/0x80 [ 490.865988][T13635] ? kasan_save_free_info+0x46/0x50 [ 490.866011][T13635] ? __kasan_slab_free+0x5c/0x80 [ 490.866027][T13635] ? kmem_cache_free+0x19b/0x690 [ 490.866054][T13635] ? get_signal+0xa4b/0x1340 [ 490.866070][T13635] ? arch_do_signal_or_restart+0xa0/0x790 [ 490.866096][T13635] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 490.866122][T13635] ? exc_page_fault+0xab/0x100 [ 490.866144][T13635] ? asm_exc_page_fault+0x26/0x30 [ 490.866229][T13635] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.866254][T13635] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.866282][T13635] get_signal+0x1108/0x1340 [ 490.866326][T13635] arch_do_signal_or_restart+0xa0/0x790 [ 490.866357][T13635] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 490.866387][T13635] ? __bad_area_nosemaphore+0x3fb/0x780 [ 490.866422][T13635] ? local_irq_enable_exit_to_user+0x5/0x10 [ 490.866458][T13635] irqentry_exit_to_user_mode+0x7e/0x110 [ 490.866482][T13635] exc_page_fault+0xab/0x100 [ 490.866507][T13635] asm_exc_page_fault+0x26/0x30 [ 490.866522][T13635] RIP: 0033:0x7f408c04f987 [ 490.866539][T13635] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 490.866555][T13635] RSP: 002b:00007f408d085120 EFLAGS: 00010202 [ 490.866572][T13635] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f408c18efc9 [ 490.866584][T13635] RDX: 00007f408d085140 RSI: 00007f408d085270 RDI: 000000000000000b [ 490.866596][T13635] RBP: 00007f408c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.866607][T13635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 490.866619][T13635] R13: 00007f408c3e6218 R14: 00007f408c3e6180 R15: 00007ffd22158688 [ 490.866648][T13635] [ 490.913397][T13635] memory: usage 307200kB, limit 307200kB, failcnt 19134 [ 490.913421][T13635] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 490.913437][T13635] kmem: usage 6212kB, limit 9007199254740988kB, failcnt 0 [ 490.913450][T13635] Memory cgroup stats for /syz8: [ 490.913594][T13635] cache 307359744 [ 490.913607][T13635] rss 765952 [ 490.913615][T13635] rss_huge 0 [ 490.913624][T13635] shmem 307359744 [ 490.913634][T13635] mapped_file 0 [ 490.913643][T13635] dirty 0 [ 490.913652][T13635] writeback 0 [ 490.913661][T13635] workingset_refault_anon 8 [ 490.913672][T13635] workingset_refault_file 0 [ 490.913682][T13635] swap 127971328 [ 490.913691][T13635] swapcached 24576 [ 490.913701][T13635] pgpgin 181067 [ 490.913710][T13635] pgpgout 105964 [ 490.913719][T13635] pgfault 52534 [ 490.913728][T13635] pgmajfault 11 [ 490.913737][T13635] inactive_anon 179613696 [ 490.913747][T13635] active_anon 128512000 [ 490.913756][T13635] inactive_file 0 [ 490.913766][T13635] active_file 0 [ 490.913775][T13635] unevictable 0 [ 490.913784][T13635] hierarchical_memory_limit 314572800 [ 490.913795][T13635] hierarchical_memsw_limit 9223372036854771712 [ 490.913806][T13635] total_cache 307359744 [ 490.913815][T13635] total_rss 765952 [ 490.913825][T13635] total_rss_huge 0 [ 490.913834][T13635] total_shmem 307359744 [ 490.913843][T13635] total_mapped_file 0 [ 490.913853][T13635] total_dirty 0 [ 490.913862][T13635] total_writeback 0 [ 490.913872][T13635] total_workingset_refault_anon 8 [ 490.913882][T13635] total_workingset_refault_file 0 [ 490.913892][T13635] total_swap 127971328 [ 490.913900][T13635] total_swapcached 24576 [ 490.913910][T13635] total_pgpgin 181067 [ 490.913919][T13635] total_pgpgout 105964 [ 490.913929][T13635] total_pgfault 52534 [ 490.913938][T13635] total_pgmajfault 11 [ 490.913948][T13635] total_inactive_anon 179613696 [ 490.913958][T13635] total_active_anon 128512000 [ 490.913968][T13635] total_inactive_file 0 [ 490.913977][T13635] total_active_file 0 [ 490.913987][T13635] total_unevictable 0 [ 490.913996][T13635] anon_cost 0 [ 490.914005][T13635] file_cost 0 [ 490.914015][T13635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2023,pid=13618,uid=0 [ 490.914113][T13635] Memory cgroup out of memory: Killed process 13618 (syz.8.2023) total-vm:98444kB, anon-rss:1284kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 491.448920][ T5930] usb 9-1: USB disconnect, device number 9 [ 492.337680][T13622] syz.8.2023 (13622) used greatest stack depth: 16616 bytes left [ 492.545625][ T798] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 492.639836][T13624] syz.8.2023 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 492.639873][T13624] CPU: 1 UID: 0 PID: 13624 Comm: syz.8.2023 Not tainted syzkaller #0 PREEMPT(full) [ 492.639895][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.639908][T13624] Call Trace: [ 492.639917][T13624] [ 492.639926][T13624] dump_stack_lvl+0x189/0x250 [ 492.639958][T13624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.639982][T13624] ? __pfx__printk+0x10/0x10 [ 492.640018][T13624] dump_header+0xd3/0x480 [ 492.640047][T13624] oom_kill_process+0x263/0x800 [ 492.640081][T13624] out_of_memory+0xf09/0x12a0 [ 492.640125][T13624] ? __pfx_out_of_memory+0x10/0x10 [ 492.640166][T13624] mem_cgroup_out_of_memory+0x145/0x240 [ 492.640197][T13624] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 492.640239][T13624] ? _raw_spin_unlock+0x28/0x50 [ 492.640263][T13624] ? memcg1_oom_prepare+0x37f/0x450 [ 492.640289][T13624] try_charge_memcg+0xdf0/0x1280 [ 492.640332][T13624] ? __pfx_try_charge_memcg+0x10/0x10 [ 492.640359][T13624] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 492.640396][T13624] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 492.640431][T13624] charge_memcg+0x9f/0x180 [ 492.640457][T13624] __mem_cgroup_charge+0x25/0x80 [ 492.640482][T13624] shmem_alloc_and_add_folio+0x790/0xf40 [ 492.640517][T13624] ? filemap_get_entry+0xad/0x2f0 [ 492.640534][T13624] ? filemap_get_entry+0xad/0x2f0 [ 492.640553][T13624] ? filemap_get_entry+0x28f/0x2f0 [ 492.640575][T13624] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 492.640607][T13624] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 492.640641][T13624] shmem_get_folio_gfp+0x59d/0x1660 [ 492.640681][T13624] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 492.640713][T13624] shmem_write_begin+0xf7/0x2b0 [ 492.640748][T13624] generic_perform_write+0x2c5/0x900 [ 492.640791][T13624] ? __pfx_generic_perform_write+0x10/0x10 [ 492.640812][T13624] ? down_write+0x162/0x1f0 [ 492.640847][T13624] ? file_update_time+0x2da/0x490 [ 492.640873][T13624] shmem_file_write_iter+0xf8/0x120 [ 492.640899][T13624] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 492.640929][T13624] __kernel_write_iter+0x428/0x910 [ 492.640954][T13624] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 492.640985][T13624] ? __pfx___kernel_write_iter+0x10/0x10 [ 492.641015][T13624] ? __asan_memset+0x22/0x50 [ 492.641042][T13624] ? iov_iter_bvec+0xb8/0x180 [ 492.641074][T13624] dump_user_range+0x8a0/0xc90 [ 492.641116][T13624] ? __pfx_dump_user_range+0x10/0x10 [ 492.641141][T13624] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 492.641178][T13624] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 492.641218][T13624] ? dump_emit+0xa6/0xe0 [ 492.641241][T13624] ? elf_core_dump+0x2cd0/0x3960 [ 492.641272][T13624] elf_core_dump+0x3369/0x3960 [ 492.641319][T13624] ? __pfx_elf_core_dump+0x10/0x10 [ 492.641352][T13624] ? kasan_save_track+0x4f/0x80 [ 492.641379][T13624] ? kasan_save_track+0x3e/0x80 [ 492.641405][T13624] ? __kasan_kmalloc+0x93/0xb0 [ 492.641421][T13624] ? __kvmalloc_node_noprof+0x5d9/0x910 [ 492.641439][T13624] ? coredump_write+0x343/0x1900 [ 492.641464][T13624] ? vfs_coredump+0x1db5/0x2a60 [ 492.641488][T13624] ? get_signal+0x1108/0x1340 [ 492.641505][T13624] ? arch_do_signal_or_restart+0xa0/0x790 [ 492.641532][T13624] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 492.641557][T13624] ? exc_page_fault+0xab/0x100 [ 492.641579][T13624] ? asm_exc_page_fault+0x26/0x30 [ 492.641647][T13624] ? 0xffffffffff600000 [ 492.641667][T13624] ? up_write+0x1c4/0x420 [ 492.641692][T13624] coredump_write+0x116c/0x1900 [ 492.641735][T13624] ? __pfx_coredump_write+0x10/0x10 [ 492.641772][T13624] ? kfree+0x4d/0x6d0 [ 492.641802][T13624] ? unshare_files+0xa9/0x140 [ 492.641826][T13624] vfs_coredump+0x1db5/0x2a60 [ 492.641868][T13624] ? __pfx_vfs_coredump+0x10/0x10 [ 492.641897][T13624] ? __lock_acquire+0xab9/0xd20 [ 492.641935][T13624] ? __lock_acquire+0xab9/0xd20 [ 492.641970][T13624] ? is_bpf_text_address+0x26/0x2b0 [ 492.642005][T13624] ? is_bpf_text_address+0x26/0x2b0 [ 492.642032][T13624] ? is_bpf_text_address+0x292/0x2b0 [ 492.642052][T13624] ? is_bpf_text_address+0x26/0x2b0 [ 492.642077][T13624] ? kernel_text_address+0xa5/0xe0 [ 492.642106][T13624] ? __kernel_text_address+0xd/0x40 [ 492.642131][T13624] ? unwind_get_return_address+0x4d/0x90 [ 492.642153][T13624] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.642178][T13624] ? arch_stack_walk+0xfc/0x150 [ 492.642213][T13624] ? stack_trace_save+0x9c/0xe0 [ 492.642239][T13624] ? stack_depot_save_flags+0x40/0x860 [ 492.642268][T13624] ? kasan_save_track+0x4f/0x80 [ 492.642293][T13624] ? kasan_save_track+0x3e/0x80 [ 492.642318][T13624] ? kasan_save_free_info+0x46/0x50 [ 492.642341][T13624] ? __kasan_slab_free+0x5c/0x80 [ 492.642357][T13624] ? kmem_cache_free+0x19b/0x690 [ 492.642383][T13624] ? get_signal+0xa4b/0x1340 [ 492.642400][T13624] ? arch_do_signal_or_restart+0xa0/0x790 [ 492.642426][T13624] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 492.642451][T13624] ? exc_page_fault+0xab/0x100 [ 492.642474][T13624] ? asm_exc_page_fault+0x26/0x30 [ 492.642553][T13624] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.642576][T13624] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.642605][T13624] get_signal+0x1108/0x1340 [ 492.642647][T13624] arch_do_signal_or_restart+0xa0/0x790 [ 492.642679][T13624] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.642708][T13624] ? __bad_area_nosemaphore+0x3fb/0x780 [ 492.642743][T13624] ? local_irq_enable_exit_to_user+0x5/0x10 [ 492.642785][T13624] irqentry_exit_to_user_mode+0x7e/0x110 [ 492.642813][T13624] exc_page_fault+0xab/0x100 [ 492.642840][T13624] asm_exc_page_fault+0x26/0x30 [ 492.642858][T13624] RIP: 0033:0x7f408c04f987 [ 492.642876][T13624] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 492.642893][T13624] RSP: 002b:00007f408d085120 EFLAGS: 00010202 [ 492.642911][T13624] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f408c18efc9 [ 492.642925][T13624] RDX: 00007f408d085140 RSI: 00007f408d085270 RDI: 000000000000000b [ 492.642939][T13624] RBP: 00007f408c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.642951][T13624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 492.642963][T13624] R13: 00007f408c3e6218 R14: 00007f408c3e6180 R15: 00007ffd22158688 [ 492.642998][T13624] [ 492.695925][ T798] usb 9-1: device descriptor read/64, error -71 [ 492.696101][T13624] memory: usage 307200kB, limit 307200kB, failcnt 20307 [ 492.696116][T13624] memory+swap: usage 432160kB, limit 9007199254740988kB, failcnt 0 [ 492.696129][T13624] kmem: usage 5832kB, limit 9007199254740988kB, failcnt 0 [ 492.696139][T13624] Memory cgroup stats for /syz8: [ 492.696234][T13624] cache 307974144 [ 492.696243][T13624] rss 618496 [ 492.696249][T13624] rss_huge 0 [ 492.696255][T13624] shmem 307974144 [ 492.696261][T13624] mapped_file 0 [ 492.696268][T13624] dirty 0 [ 492.696274][T13624] writeback 0 [ 492.696280][T13624] workingset_refault_anon 19 [ 492.696287][T13624] workingset_refault_file 0 [ 492.696294][T13624] swap 127959040 [ 492.696300][T13624] swapcached 36864 [ 492.696306][T13624] pgpgin 200582 [ 492.696313][T13624] pgpgout 125366 [ 492.696319][T13624] pgfault 53356 [ 492.696326][T13624] pgmajfault 22 [ 492.696332][T13624] inactive_anon 112988160 [ 492.696339][T13624] active_anon 195342336 [ 492.696345][T13624] inactive_file 0 [ 492.696351][T13624] active_file 0 [ 492.696358][T13624] unevictable 0 [ 492.696364][T13624] hierarchical_memory_limit 314572800 [ 492.696372][T13624] hierarchical_memsw_limit 9223372036854771712 [ 492.696379][T13624] total_cache 307974144 [ 492.696386][T13624] total_rss 618496 [ 492.696392][T13624] total_rss_huge 0 [ 492.696398][T13624] total_shmem 307974144 [ 492.696405][T13624] total_mapped_file 0 [ 492.696411][T13624] total_dirty 0 [ 492.696418][T13624] total_writeback 0 [ 492.696424][T13624] total_workingset_refault_anon 19 [ 492.696432][T13624] total_workingset_refault_file 0 [ 492.696439][T13624] total_swap 127959040 [ 492.696446][T13624] total_swapcached 36864 [ 492.696453][T13624] total_pgpgin 200582 [ 492.696459][T13624] total_pgpgout 125366 [ 492.696466][T13624] total_pgfault 53356 [ 492.696473][T13624] total_pgmajfault 22 [ 492.696480][T13624] total_inactive_anon 112988160 [ 492.696487][T13624] total_active_anon 195342336 [ 492.696494][T13624] total_inactive_file 0 [ 492.696501][T13624] total_active_file 0 [ 492.696508][T13624] total_unevictable 0 [ 492.696514][T13624] anon_cost 0 [ 492.696521][T13624] file_cost 0 [ 492.696528][T13624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2023,pid=13625,uid=0 [ 492.696615][T13624] Memory cgroup out of memory: Killed process 13625 (syz.8.2023) total-vm:98444kB, anon-rss:1196kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 492.757204][ T3593] IPVS: sh: FWM 3 0x00000003 - no destination available [ 492.766957][ T31] INFO: task syz.4.1345:11035 blocked for more than 143 seconds. [ 492.766985][ T31] Not tainted syzkaller #0 [ 492.766998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.767010][ T31] task:syz.4.1345 state:D stack:26376 pid:11035 tgid:11033 ppid:6291 task_flags:0x400140 flags:0x00080002 [ 492.767077][ T31] Call Trace: [ 492.767086][ T31] [ 492.767102][ T31] __schedule+0x17c4/0x4d60 [ 492.767148][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.767188][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.767220][ T31] ? __pfx___schedule+0x10/0x10 [ 492.767264][ T31] ? schedule+0x91/0x360 [ 492.767293][ T31] schedule+0x165/0x360 [ 492.767322][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.767349][ T31] __mutex_lock+0x7e6/0x1350 [ 492.767384][ T31] ? __mutex_lock+0x5bb/0x1350 [ 492.767418][ T31] ? bdev_open+0xe0/0xd30 [ 492.767451][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.767481][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 492.767517][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 492.767550][ T31] ? disk_block_events+0xab/0x120 [ 492.767572][ T31] ? bdev_open+0xbe/0xd30 [ 492.767602][ T31] bdev_open+0xe0/0xd30 [ 492.767643][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 492.767676][ T31] setup_bdev_super+0x5a/0x5b0 [ 492.767705][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 492.767738][ T31] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 492.767768][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 492.767805][ T31] vfs_get_tree+0x92/0x2b0 [ 492.767834][ T31] do_new_mount+0x302/0xa10 [ 492.767859][ T31] ? apparmor_capable+0x137/0x1b0 [ 492.767887][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 492.767915][ T31] ? ns_capable+0x8a/0xf0 [ 492.767941][ T31] ? kmem_cache_free+0x19b/0x690 [ 492.767983][ T31] __se_sys_mount+0x313/0x410 [ 492.768018][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 492.768051][ T31] ? do_syscall_64+0xbe/0xfa0 [ 492.768077][ T31] ? __x64_sys_mount+0x20/0xc0 [ 492.768107][ T31] do_syscall_64+0xfa/0xfa0 [ 492.768134][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.768161][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.768183][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.768210][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.768232][ T31] RIP: 0033:0x7f80ff18efc9 [ 492.768251][ T31] RSP: 002b:00007f80fd3f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 492.768275][ T31] RAX: ffffffffffffffda RBX: 00007f80ff3e5fa0 RCX: 00007f80ff18efc9 [ 492.768292][ T31] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 492.768309][ T31] RBP: 00007f80ff211f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.768324][ T31] R10: 0000000002a00000 R11: 0000000000000246 R12: 0000000000000000 [ 492.768339][ T31] R13: 00007f80ff3e6038 R14: 00007f80ff3e5fa0 R15: 00007ffebf754c68 [ 492.768375][ T31] [ 492.768437][ T31] [ 492.768437][ T31] Showing all locks held in the system: [ 492.768451][ T31] 1 lock held by khungtaskd/31: [ 492.768464][ T31] #0: ffffffff8e33d960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.768528][ T31] 5 locks held by kworker/1:2/798: [ 492.768541][ T31] #0: ffff888143288948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0 [ 492.768596][ T31] #1: ffffc90003357ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0 [ 492.768651][ T31] #2: ffff888028dbc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 492.768706][ T31] #3: ffff88802758f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 492.768766][ T31] #4: ffff888028bb2168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 492.768838][ T31] 1 lock held by udevd/5198: [ 492.768850][ T31] 2 locks held by getty/5588: [ 492.768863][ T31] #0: ffff88814e34d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.768919][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 492.768981][ T31] 1 lock held by udevd/5832: [ 492.768995][ T31] #0: ffff888142309358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 492.769060][ T31] 1 lock held by udevd/5963: [ 492.769073][ T31] #0: ffff888025ca9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 492.769141][ T31] 2 locks held by syz.4.1345/11035: [ 492.769154][ T31] #0: ffff88805e9f60e0 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x960 [ 492.769222][ T31] #1: ffff888142309358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 492.769285][ T31] 2 locks held by syz.1.1714/12566: [ 492.769298][ T31] #0: ffff88805e1d60e0 (&type->s_umount_key#94/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x960 [ 492.769364][ T31] #1: ffff888025ca9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 492.769441][ T31] 4 locks held by syz-executor/13507: [ 492.769454][ T31] 2 locks held by syz.8.2023/13619: [ 492.769465][ T31] 2 locks held by syz.8.2023/13620: [ 492.769477][ T31] 3 locks held by syz.8.2023/13621: [ 492.769488][ T31] 3 locks held by syz.8.2023/13623: [ 492.769499][ T31] 2 locks held by syz.8.2023/13624: [ 492.769510][ T31] 2 locks held by syz.8.2023/13625: [ 492.769521][ T31] 2 locks held by syz.8.2023/13626: [ 492.769533][ T31] 2 locks held by syz.8.2023/13629: [ 492.769546][ T31] 2 locks held by syz.8.2023/13630: [ 492.769557][ T31] 2 locks held by syz.8.2023/13633: [ 492.769569][ T31] 2 locks held by syz.8.2023/13635: [ 492.769582][ T31] 3 locks held by syz.9.2055/13733: [ 492.769594][ T31] 1 lock held by syz.8.2059/13748: [ 492.769606][ T31] #0: ffffffff8eb6e828 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x200/0xd10 [ 492.769663][ T31] [ 492.769670][ T31] ============================================= [ 492.769670][ T31] [ 492.769680][ T31] NMI backtrace for cpu 1 [ 492.769693][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.769722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.769735][ T31] Call Trace: [ 492.769743][ T31] [ 492.769751][ T31] dump_stack_lvl+0x189/0x250 [ 492.769778][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.769802][ T31] ? __pfx__printk+0x10/0x10 [ 492.769836][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 492.769860][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 492.769883][ T31] ? __pfx__printk+0x10/0x10 [ 492.769908][ T31] ? debug_show_all_locks+0x2e/0x180 [ 492.769927][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.769960][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.769981][ T31] watchdog+0xfa9/0xff0 [ 492.770001][ T31] ? watchdog+0x1f4/0xff0 [ 492.770023][ T31] kthread+0x711/0x8a0 [ 492.770048][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.770064][ T31] ? __pfx_kthread+0x10/0x10 [ 492.770087][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.770108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.770132][ T31] ? __pfx_kthread+0x10/0x10 [ 492.770157][ T31] ret_from_fork+0x4bc/0x870 [ 492.770189][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.770225][ T31] ? __switch_to_asm+0x39/0x70 [ 492.770249][ T31] ? __switch_to_asm+0x33/0x70 [ 492.770273][ T31] ? __pfx_kthread+0x10/0x10 [ 492.770298][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.770339][ T31] [ 492.770390][ T31] Sending NMI from CPU 1 to CPUs 0: [ 492.770417][ C0] NMI backtrace for cpu 0 [ 492.770429][ C0] CPU: 0 UID: 0 PID: 13620 Comm: syz.8.2023 Not tainted syzkaller #0 PREEMPT(full) [ 492.770448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.770458][ C0] RIP: 0010:lock_acquire+0x15c/0x360 [ 492.770484][ C0] Code: ff ff ff 65 0f c1 05 33 75 1a 11 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 <0f> 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab [ 492.770499][ C0] RSP: 0018:ffffc900041b5e80 EFLAGS: 00000046 [ 492.770514][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ff6317c48cea0500 [ 492.770526][ C0] RDX: 0000000000000000 RSI: ffffffff8dc64971 RDI: ffffffff8be0f0c0 [ 492.770538][ C0] RBP: ffffffff8202a328 R08: 0000000000000000 R09: ffffffff8202a328 [ 492.770550][ C0] R10: dffffc0000000000 R11: ffffed100c8ab3e5 R12: 0000000000000002 [ 492.770562][ C0] R13: ffffffff8e33d960 R14: 0000000000000000 R15: 0000000000000246 [ 492.770574][ C0] FS: 0000000000000000(0000) GS:ffff888125a9c000(0000) knlGS:0000000000000000 [ 492.770588][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.770600][ C0] CR2: 00007f2e5fb156c0 CR3: 000000006b826000 CR4: 00000000003526f0 [ 492.770616][ C0] Call Trace: [ 492.770622][ C0] [ 492.770632][ C0] ? shrink_slab+0x1e8/0x10d0 [ 492.770653][ C0] shrink_slab+0x209/0x10d0 [ 492.770670][ C0] ? shrink_slab+0x1e8/0x10d0 [ 492.770688][ C0] ? shrink_slab+0x1e8/0x10d0 [ 492.770709][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 492.770732][ C0] ? mem_cgroup_iter+0x3e7/0x460 [ 492.770747][ C0] ? page_counter_calculate_protection+0x188/0x470 [ 492.770766][ C0] ? mem_cgroup_iter+0x3b/0x460 [ 492.770782][ C0] shrink_node+0xb03/0x35b0 [ 492.770799][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 492.770838][ C0] ? __pfx_shrink_node+0x10/0x10 [ 492.770856][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 492.770875][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 492.770896][ C0] ? _raw_spin_unlock+0x28/0x50 [ 492.770914][ C0] ? vmpressure_prio+0x33/0x150 [ 492.770931][ C0] do_try_to_free_pages+0x668/0x1960 [ 492.770953][ C0] ? __page_table_check_zero+0xba/0x530 [ 492.770988][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 492.771014][ C0] try_to_free_mem_cgroup_pages+0x2fa/0x7e0 [ 492.771038][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 492.771067][ C0] ? cgroup_file_notify+0x110/0x190 [ 492.771089][ C0] try_charge_memcg+0xa39/0x1280 [ 492.771116][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 492.771137][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 492.771164][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 492.771191][ C0] charge_memcg+0x9f/0x180 [ 492.771210][ C0] __mem_cgroup_charge+0x25/0x80 [ 492.771230][ C0] shmem_alloc_and_add_folio+0x790/0xf40 [ 492.771256][ C0] ? filemap_get_entry+0xad/0x2f0 [ 492.771270][ C0] ? filemap_get_entry+0xad/0x2f0 [ 492.771285][ C0] ? filemap_get_entry+0x28f/0x2f0 [ 492.771301][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 492.771325][ C0] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 492.771346][ C0] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 492.771368][ C0] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 492.771390][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 492.771419][ C0] shmem_write_begin+0xf7/0x2b0 [ 492.771444][ C0] generic_perform_write+0x2c5/0x900 [ 492.771468][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 492.771488][ C0] ? mnt_put_write_access_file+0xc0/0x100 [ 492.771505][ C0] ? file_update_time+0x416/0x490 [ 492.771523][ C0] shmem_file_write_iter+0xf8/0x120 [ 492.771544][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 492.771568][ C0] __kernel_write_iter+0x428/0x910 [ 492.771587][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 492.771610][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 492.771632][ C0] ? __asan_memset+0x22/0x50 [ 492.771653][ C0] ? iov_iter_bvec+0xb8/0x180 [ 492.771677][ C0] dump_user_range+0x8a0/0xc90 [ 492.771705][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 492.771726][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 492.771754][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 492.771781][ C0] ? dump_emit+0xa6/0xe0 [ 492.771801][ C0] ? elf_core_dump+0x2cd0/0x3960 [ 492.771824][ C0] elf_core_dump+0x3369/0x3960 [ 492.771855][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 492.771878][ C0] ? kasan_save_track+0x4f/0x80 [ 492.771901][ C0] ? kasan_save_track+0x3e/0x80 [ 492.771922][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 492.771937][ C0] ? __kvmalloc_node_noprof+0x5d9/0x910 [ 492.771952][ C0] ? coredump_write+0x343/0x1900 [ 492.771977][ C0] ? vfs_coredump+0x1db5/0x2a60 [ 492.771996][ C0] ? get_signal+0x1108/0x1340 [ 492.772010][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 492.772033][ C0] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 492.772054][ C0] ? exc_page_fault+0xab/0x100 [ 492.772073][ C0] ? asm_exc_page_fault+0x26/0x30 [ 492.772110][ C0] ? 0xffffffffff600000 [ 492.772126][ C0] ? up_write+0x1c4/0x420 [ 492.772146][ C0] coredump_write+0x116c/0x1900 [ 492.772176][ C0] ? __pfx_coredump_write+0x10/0x10 [ 492.772201][ C0] ? kfree+0x4d/0x6d0 [ 492.772224][ C0] ? unshare_files+0xa9/0x140 [ 492.772244][ C0] vfs_coredump+0x1db5/0x2a60 [ 492.772274][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 492.772299][ C0] ? __lock_acquire+0xab9/0xd20 [ 492.772328][ C0] ? __lock_acquire+0xab9/0xd20 [ 492.772354][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 492.772377][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 492.772396][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 492.772413][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 492.772432][ C0] ? kernel_text_address+0xa5/0xe0 [ 492.772454][ C0] ? __kernel_text_address+0xd/0x40 [ 492.772475][ C0] ? unwind_get_return_address+0x4d/0x90 [ 492.772494][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.772514][ C0] ? arch_stack_walk+0xfc/0x150 [ 492.772537][ C0] ? stack_trace_save+0x9c/0xe0 [ 492.772557][ C0] ? stack_depot_save_flags+0x40/0x860 [ 492.772580][ C0] ? kasan_save_track+0x4f/0x80 [ 492.772602][ C0] ? kasan_save_track+0x3e/0x80 [ 492.772623][ C0] ? kasan_save_free_info+0x46/0x50 [ 492.772642][ C0] ? __kasan_slab_free+0x5c/0x80 [ 492.772655][ C0] ? kmem_cache_free+0x19b/0x690 [ 492.772677][ C0] ? get_signal+0xa4b/0x1340 [ 492.772691][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 492.772711][ C0] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 492.772732][ C0] ? exc_page_fault+0xab/0x100 [ 492.772751][ C0] ? asm_exc_page_fault+0x26/0x30 [ 492.772791][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.772810][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.772832][ C0] get_signal+0x1108/0x1340 [ 492.772856][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 492.772880][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.772903][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 492.772926][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 492.772952][ C0] irqentry_exit_to_user_mode+0x7e/0x110 [ 492.772979][ C0] exc_page_fault+0xab/0x100 [ 492.773000][ C0] asm_exc_page_fault+0x26/0x30 [ 492.773015][ C0] RIP: 0033:0x7f408c04f987 [ 492.773029][ C0] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 492.773044][ C0] RSP: 002b:00007f408d085120 EFLAGS: 00010202 [ 492.773058][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f408c18efc9 [ 492.773069][ C0] RDX: 00007f408d085140 RSI: 00007f408d085270 RDI: 000000000000000b [ 492.773080][ C0] RBP: 00007f408c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.773092][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 492.773102][ C0] R13: 00007f408c3e6218 R14: 00007f408c3e6180 R15: 00007ffd22158688 [ 492.773123][ C0] [ 492.875818][T13751] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2060'. [ 492.963365][ T798] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 493.046554][T13620] syz.8.2023 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 493.046588][T13620] CPU: 0 UID: 0 PID: 13620 Comm: syz.8.2023 Not tainted syzkaller #0 PREEMPT(full) [ 493.046610][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 493.046623][T13620] Call Trace: [ 493.046631][T13620] [ 493.046641][T13620] dump_stack_lvl+0x189/0x250 [ 493.046673][T13620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.046697][T13620] ? __pfx__printk+0x10/0x10 [ 493.046735][T13620] dump_header+0xd3/0x480 [ 493.046764][T13620] oom_kill_process+0x263/0x800 [ 493.046800][T13620] out_of_memory+0xf09/0x12a0 [ 493.046844][T13620] ? __pfx_out_of_memory+0x10/0x10 [ 493.046886][T13620] mem_cgroup_out_of_memory+0x145/0x240 [ 493.046919][T13620] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 493.046966][T13620] ? _raw_spin_unlock+0x28/0x50 [ 493.046989][T13620] ? memcg1_oom_prepare+0x37f/0x450 [ 493.047015][T13620] try_charge_memcg+0xdf0/0x1280 [ 493.047056][T13620] ? __pfx_try_charge_memcg+0x10/0x10 [ 493.047082][T13620] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 493.047119][T13620] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 493.047153][T13620] charge_memcg+0x9f/0x180 [ 493.047179][T13620] __mem_cgroup_charge+0x25/0x80 [ 493.047203][T13620] shmem_alloc_and_add_folio+0x790/0xf40 [ 493.047232][T13620] ? filemap_get_entry+0xad/0x2f0 [ 493.047247][T13620] ? filemap_get_entry+0xad/0x2f0 [ 493.047263][T13620] ? filemap_get_entry+0x28f/0x2f0 [ 493.047280][T13620] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 493.047307][T13620] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 493.047331][T13620] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 493.047356][T13620] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 493.047384][T13620] shmem_get_folio_gfp+0x59d/0x1660 [ 493.047429][T13620] shmem_write_begin+0xf7/0x2b0 [ 493.047461][T13620] generic_perform_write+0x2c5/0x900 [ 493.047495][T13620] ? __pfx_generic_perform_write+0x10/0x10 [ 493.047520][T13620] ? mnt_put_write_access_file+0xc0/0x100 [ 493.047542][T13620] ? file_update_time+0x416/0x490 [ 493.047565][T13620] shmem_file_write_iter+0xf8/0x120 [ 493.047588][T13620] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 493.047618][T13620] __kernel_write_iter+0x428/0x910 [ 493.047643][T13620] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 493.047678][T13620] ? __pfx___kernel_write_iter+0x10/0x10 [ 493.047707][T13620] ? __asan_memset+0x22/0x50 [ 493.047734][T13620] ? iov_iter_bvec+0xb8/0x180 [ 493.047764][T13620] dump_user_range+0x8a0/0xc90 [ 493.047802][T13620] ? __pfx_dump_user_range+0x10/0x10 [ 493.047826][T13620] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 493.047864][T13620] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 493.047902][T13620] ? dump_emit+0xa6/0xe0 [ 493.047925][T13620] ? elf_core_dump+0x2cd0/0x3960 [ 493.047962][T13620] elf_core_dump+0x3369/0x3960 [ 493.048008][T13620] ? __pfx_elf_core_dump+0x10/0x10 [ 493.048034][T13620] ? kasan_save_track+0x4f/0x80 [ 493.048061][T13620] ? kasan_save_track+0x3e/0x80 [ 493.048086][T13620] ? __kasan_kmalloc+0x93/0xb0 [ 493.048103][T13620] ? __kvmalloc_node_noprof+0x5d9/0x910 [ 493.048120][T13620] ? coredump_write+0x343/0x1900 [ 493.048144][T13620] ? vfs_coredump+0x1db5/0x2a60 [ 493.048167][T13620] ? get_signal+0x1108/0x1340 [ 493.048183][T13620] ? arch_do_signal_or_restart+0xa0/0x790 [ 493.048208][T13620] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 493.048233][T13620] ? exc_page_fault+0xab/0x100 [ 493.048254][T13620] ? asm_exc_page_fault+0x26/0x30 [ 493.048319][T13620] ? 0xffffffffff600000 [ 493.048339][T13620] ? up_write+0x1c4/0x420 [ 493.048365][T13620] coredump_write+0x116c/0x1900 [ 493.048407][T13620] ? __pfx_coredump_write+0x10/0x10 [ 493.048442][T13620] ? kfree+0x4d/0x6d0 [ 493.048474][T13620] ? unshare_files+0xa9/0x140 [ 493.048499][T13620] vfs_coredump+0x1db5/0x2a60 [ 493.048541][T13620] ? __pfx_vfs_coredump+0x10/0x10 [ 493.048574][T13620] ? __lock_acquire+0xab9/0xd20 [ 493.048616][T13620] ? __lock_acquire+0xab9/0xd20 [ 493.048651][T13620] ? is_bpf_text_address+0x26/0x2b0 [ 493.048685][T13620] ? is_bpf_text_address+0x26/0x2b0 [ 493.048711][T13620] ? is_bpf_text_address+0x292/0x2b0 [ 493.048731][T13620] ? is_bpf_text_address+0x26/0x2b0 [ 493.048756][T13620] ? kernel_text_address+0xa5/0xe0 [ 493.048783][T13620] ? __kernel_text_address+0xd/0x40 [ 493.048808][T13620] ? unwind_get_return_address+0x4d/0x90 [ 493.048829][T13620] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 493.048853][T13620] ? arch_stack_walk+0xfc/0x150 [ 493.048888][T13620] ? stack_trace_save+0x9c/0xe0 [ 493.048913][T13620] ? stack_depot_save_flags+0x40/0x860 [ 493.048953][T13620] ? kasan_save_track+0x4f/0x80 [ 493.048980][T13620] ? kasan_save_track+0x3e/0x80 [ 493.049007][T13620] ? kasan_save_free_info+0x46/0x50 [ 493.049030][T13620] ? __kasan_slab_free+0x5c/0x80 [ 493.049046][T13620] ? kmem_cache_free+0x19b/0x690 [ 493.049072][T13620] ? get_signal+0xa4b/0x1340 [ 493.049086][T13620] ? arch_do_signal_or_restart+0xa0/0x790 [ 493.049111][T13620] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 493.049135][T13620] ? exc_page_fault+0xab/0x100 [ 493.049154][T13620] ? asm_exc_page_fault+0x26/0x30 [ 493.049225][T13620] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.049246][T13620] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.049273][T13620] get_signal+0x1108/0x1340 [ 493.049314][T13620] arch_do_signal_or_restart+0xa0/0x790 [ 493.049345][T13620] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.049374][T13620] ? __bad_area_nosemaphore+0x3fb/0x780 [ 493.049406][T13620] ? local_irq_enable_exit_to_user+0x5/0x10 [ 493.049436][T13620] irqentry_exit_to_user_mode+0x7e/0x110 [ 493.049463][T13620] exc_page_fault+0xab/0x100 [ 493.049490][T13620] asm_exc_page_fault+0x26/0x30 [ 493.049508][T13620] RIP: 0033:0x7f408c04f987 [ 493.049526][T13620] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 493.049543][T13620] RSP: 002b:00007f408d085120 EFLAGS: 00010202 [ 493.049561][T13620] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f408c18efc9 [ 493.049574][T13620] RDX: 00007f408d085140 RSI: 00007f408d085270 RDI: 000000000000000b [ 493.049587][T13620] RBP: 00007f408c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 493.049599][T13620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.049612][T13620] R13: 00007f408c3e6218 R14: 00007f408c3e6180 R15: 00007ffd22158688 [ 493.049645][T13620] [ 493.102913][ T798] usb 9-1: device descriptor read/64, error -71 [ 493.112361][T13620] memory: usage 307200kB, limit 307200kB, failcnt 20939 [ 493.112385][T13620] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 493.112403][T13620] kmem: usage 5784kB, limit 9007199254740988kB, failcnt 0 [ 493.112417][T13620] Memory cgroup stats for /syz8: [ 493.112537][T13620] cache 307986432 [ 493.112549][T13620] rss 618496 [ 493.112558][T13620] rss_huge 0 [ 493.112567][T13620] shmem 307986432 [ 493.112576][T13620] mapped_file 0 [ 493.112586][T13620] dirty 0 [ 493.112594][T13620] writeback 0 [ 493.112603][T13620] workingset_refault_anon 19 [ 493.112613][T13620] workingset_refault_file 0 [ 493.112622][T13620] swap 127954944 [ 493.112632][T13620] swapcached 36864 [ 493.112641][T13620] pgpgin 200783 [ 493.112651][T13620] pgpgout 125564 [ 493.112660][T13620] pgfault 53363 [ 493.112669][T13620] pgmajfault 22 [ 493.112678][T13620] inactive_anon 112816128 [ 493.112686][T13620] active_anon 195559424 [ 493.112696][T13620] inactive_file 0 [ 493.112705][T13620] active_file 0 [ 493.112715][T13620] unevictable 0 [ 493.112724][T13620] hierarchical_memory_limit 314572800 [ 493.112734][T13620] hierarchical_memsw_limit 9223372036854771712 [ 493.112745][T13620] total_cache 307986432 [ 493.112755][T13620] total_rss 618496 [ 493.112764][T13620] total_rss_huge 0 [ 493.112773][T13620] total_shmem 307986432 [ 493.112783][T13620] total_mapped_file 0 [ 493.112793][T13620] total_dirty 0 [ 493.112802][T13620] total_writeback 0 [ 493.112811][T13620] total_workingset_refault_anon 19 [ 493.112821][T13620] total_workingset_refault_file 0 [ 493.112832][T13620] total_swap 127954944 [ 493.112841][T13620] total_swapcached 36864 [ 493.112851][T13620] total_pgpgin 200783 [ 493.112860][T13620] total_pgpgout 125564 [ 493.112870][T13620] total_pgfault 53363 [ 493.112879][T13620] total_pgmajfault 22 [ 493.112889][T13620] total_inactive_anon 112816128 [ 493.112899][T13620] total_active_anon 195559424 [ 493.112909][T13620] total_inactive_file 0 [ 493.112919][T13620] total_active_file 0 [ 493.112928][T13620] total_unevictable 0 [ 493.112944][T13620] anon_cost 0 [ 493.112953][T13620] file_cost 0 [ 493.112963][T13620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2023,pid=13629,uid=0 [ 493.113074][T13620] Memory cgroup out of memory: Killed process 13629 (syz.8.2023) total-vm:98444kB, anon-rss:1160kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 493.221155][ T798] usb usb9-port1: attempt power cycle [ 493.435163][ T5867] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 493.593573][ T798] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 493.604279][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 493.620048][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.620105][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.620135][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.620158][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 493.620183][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.620511][ T798] usb 9-1: device descriptor read/8, error -71 [ 493.626339][ T5867] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 493.626371][ T5867] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 493.626394][ T5867] usb 4-1: Manufacturer: syz [ 493.630204][ T5867] usb 4-1: config 0 descriptor?? [ 493.893021][ T798] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 493.924208][ T798] usb 9-1: device descriptor read/8, error -71 [ 494.032485][ T798] usb usb9-port1: unable to enumerate USB device [ 494.130949][ T5867] rc_core: IR keymap rc-hauppauge not found [ 494.130970][ T5867] Registered IR keymap rc-empty [ 494.131113][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.160406][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.182818][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 494.185003][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 494.241261][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.258099][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.279025][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.299599][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.320821][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.342283][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.363703][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.385575][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.406959][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.438724][ T5867] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.463812][ T5867] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 494.463842][ T5867] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 494.605823][ T7346] usb 4-1: USB disconnect, device number 89 [ 494.830509][T13625] syz.8.2023 (13625) used greatest stack depth: 15416 bytes left [ 496.283109][T13781] ISOFS: Unable to identify CD-ROM format. [ 496.400765][T13619] syz.8.2023 (13619) used greatest stack depth: 15288 bytes left [ 497.339655][T13786] netlink: 'syz.9.2069': attribute type 16 has an invalid length. [ 498.657728][ T57] IPVS: sh: FWM 3 0x00000003 - no destination available [ 500.228757][T13784] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 501.000236][ T2978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 504.066843][ T5198] udevd[5198]: worker [5963] /devices/virtual/block/nbd1 is taking a long time [ 504.076069][ T5198] udevd[5198]: worker [5832] /devices/virtual/block/nbd4 timeout; kill it [ 504.085147][ T5198] udevd[5198]: seq 12237 '/devices/virtual/block/nbd4' killed [ 505.753916][ T57] IPVS: sh: FWM 3 0x00000003 - no destination available