last executing test programs: 6m45.758984431s ago: executing program 0 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4c0, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @mcast2, 0x10}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private2, 0x43}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "52c26aea9a7d49d6ffd831bdae173b044cac78ea445176"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb17d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe159}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "da4e43ee897dadee69cb456fb0aca2d914a134f61e989569b71422c900df2d2bb1e7a0ecc1787b184d017fa1674558c86e98ec571a9a74b591be8789f6640cd4c94c9aab8a9a8de31320f66ad7e1ea44e898186b8d965c9ce610df76a740b1ef7e23598b74f5ad4dacc9b0b9975cef5917c244b17f0a7e0f1a8e02c3fb6aa0a690b443c706fb018dbcaa9e385ac9b4b4c701769606df91b41a998299a9398c35ebffbc3cbdc0f3be8fc941219b3ffb19fa4cdb072993568284e639eb84"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "f86cd454f09af90c4d0cb24aebe131dfa191add21619baaef397e88ce91c2d060c0c89eae4f0d7d4086b6ca96e32d8df0f824b1dbc508ea2d035fddd72b3108d809ac8f83c5ede98edd84194c5e8cbf51c754f7fc71afc43d3274d54272cc368e7f2e8fe1e8e9b21f66de92932f8dce712eeaaeeab35978b52ada83a9de07bcf468c64832efb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcac}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff22d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf8}]}]}]}, 0x4c0}}, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r3, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xb07, 0x35}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008) (async, rerun: 64) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b40)=0x6e) (rerun: 64) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000b80)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000bc0)=0x2c) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000044}, 0x20000080) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000d40)='bond_slave_0\x00') (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x814) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000f00)={&(0x7f0000000ec0)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x2000c000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001040)={0x0, 0x3, 0x1, 0x9}) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000014c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f00000010c0)={0x3a0, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc7}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xe}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x73de, @rand_addr=' \x01\x00', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "d256901330b697c69f0ae08c6fb7d1978862966e0398da3c5a5587289255fdef6b9cd15de73344dd9b8f7593d5502e8af33bba8b6fc5dba4837232f5049b1556f4d85051c2617a4d02525324cafd47c8364e4cda7bf05fb27a"}, @TIPC_NLA_NODE_ID={0x29, 0x3, "425e70c155d65ad68bf83c7d47e7955bd37baf16d66d54eaec69a989af955f6514f548a402"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfbd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 32) bind$inet(r7, &(0x7f0000001500)={0x2, 0x4e20, @empty}, 0x10) (rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001540)="f9978fe7d6305eac9b944aff22fabaf2780e315fa7411fc767f53d766e6bf6a95cddded937c58de58bd1588c3982cc89e779b57ec46c0683662cef7f0d5eb42e01bf0910975d0b12cd", 0x49) (async) ioctl$HIDIOCGRAWPHYS(r7, 0x80404805, &(0x7f00000015c0)) (async, rerun: 64) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000001600)={0x0, @bt={0x2, 0x4, 0x0, 0x1, 0x40, 0x2, 0x0, 0xffff25d4, 0x2, 0x0, 0x6, 0x6, 0x6, 0x4, 0x1, 0xcceaddffe44f66c1, {0xe36c5945, 0x4}, 0x1, 0xba}}) (async, rerun: 64) r8 = syz_open_dev$sg(&(0x7f00000016c0), 0x5, 0xc0200) ioctl$SG_IO(r8, 0x2285, &(0x7f0000002d00)={0x0, 0xffffffffffffffff, 0x1000, 0x9, @scatter={0x8, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001700)=""/150, 0x96}, {&(0x7f00000017c0)=""/193, 0xc1}, {&(0x7f00000018c0)=""/28, 0x1c}, {&(0x7f0000001900)=""/181, 0xb5}, {&(0x7f00000019c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/39, 0x27}, {&(0x7f0000001ac0)=""/17, 0x11}, {&(0x7f0000001b00)=""/40, 0x28}]}, &(0x7f0000001bc0)="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", &(0x7f0000002bc0)=""/201, 0xad, 0x2, 0x1, &(0x7f0000002cc0)}) (async) write$cgroup_subtree(r7, &(0x7f0000002d80)={[{0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'net'}, {0x2d, 'blkio'}, {0x2d, 'net_cls'}, {0x2b, 'net'}]}, 0x25) (async) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000003100)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000030c0)={&(0x7f0000002e00)={0x2a0, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x354d4870}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff8212a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5bc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc0}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x799d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x372484da}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8c}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x44040}, 0x40000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0xfe1ff7d9cbde0dd8}, 0xc, &(0x7f00000033c0)={&(0x7f00000031c0)={0x1e4, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a477287}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a866ef2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39323ea2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2753e288}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x493ce505}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c26ec95}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d43edcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x97dc83b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3397f637}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a02550c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c725fb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75f9d3d5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d49c0ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b63bb03}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa742}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3aef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd282}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaac1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50e6d7ee}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9aa0f36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf086}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3071}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34f4c99a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fb3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9afb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5270}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa3aa124}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e3a9a22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a5d6a19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cee7200}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda4}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f50}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x144e2a4d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1e4}}, 0x4) (async, rerun: 32) bind$inet6(r7, &(0x7f0000003440)={0xa, 0x4e20, 0xffff, @remote, 0x6}, 0x1c) (rerun: 32) 6m45.481835419s ago: executing program 0 (id=126): syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {0x2, 0x3, 0x7, 0x5}, 0x56, [0x2, 0x1d, 0x3, 0xd, 0x5, 0x9205, 0x80, 0x6, 0xc15, 0x0, 0x61f, 0x1, 0xfffffffa, 0x0, 0x7, 0x3ff, 0x10, 0xf, 0x2b, 0x6, 0xfff, 0x93, 0x5, 0x7, 0x6, 0xebbf, 0x9, 0x733, 0x3a7, 0xb98, 0x1000, 0x6, 0xd3, 0x4, 0x7, 0xa, 0xe, 0xfffffff8, 0x4000000, 0x7f, 0xfff, 0x6, 0x4, 0x800, 0x5, 0x100, 0x9f, 0x2, 0x3, 0x6, 0x2, 0x5, 0x1, 0x80000001, 0xfffffffc, 0x2, 0x3, 0x1ff, 0x78f, 0x0, 0x7c09, 0x2, 0x1, 0xffffffff], [0x200, 0x2, 0xfffffffd, 0x6, 0x101, 0x9, 0xb756, 0x14, 0xaf43, 0x9, 0x2, 0x5, 0x200, 0xa63, 0xffffb2e6, 0xfffffffc, 0x8, 0xb, 0x5, 0x6, 0x34369ed8, 0xa11, 0xfffffff7, 0x7, 0x10, 0xe, 0x6, 0x9, 0x3, 0x0, 0x1, 0x5, 0x8, 0x6, 0x1000, 0xdcba, 0x6, 0x7fff, 0xc, 0x1, 0x0, 0x80000001, 0x735, 0xad, 0xffffff7f, 0x7fffffff, 0x9, 0x4, 0x5, 0x5, 0x345, 0x2, 0x6, 0x3d7e4c0d, 0xc791, 0x10, 0x7, 0xfffffffb, 0x8, 0xc843, 0x2, 0x9, 0x8, 0xffffffff], [0xb293, 0x5, 0x7f, 0x9, 0x1, 0x5, 0x4, 0x3, 0x80000000, 0x7, 0xb, 0x11f, 0x80000000, 0x7ff, 0x4, 0x5, 0xfffffff8, 0x7f, 0x3, 0x7, 0x0, 0x9, 0x6, 0x27, 0x12e, 0x80000000, 0x4, 0x8, 0x9, 0x7, 0x401, 0x5, 0x200, 0xf, 0x1, 0x5, 0x3, 0x0, 0x4, 0x0, 0x6, 0x4, 0x3, 0x6, 0x5, 0x3, 0x1, 0x3, 0xfff, 0x401, 0x9, 0x5, 0x7, 0xffff, 0x7, 0x2, 0x101, 0x5, 0xffff5812, 0x3, 0xc, 0x0, 0x10, 0x5], [0x80000000, 0xffff, 0x4, 0x7f, 0x181eacbd, 0x400, 0x7, 0x5, 0x0, 0x6, 0x1, 0x0, 0x7, 0x4, 0x1, 0x400, 0x4, 0x9, 0xe, 0x37775335, 0x5, 0x83, 0xe9df, 0x865, 0x7, 0x8c, 0x9, 0xffff, 0x80000000, 0x7, 0x8, 0x0, 0x8000, 0x4, 0x8, 0x2, 0x0, 0x8, 0x0, 0x85, 0x11ed1ea0, 0x1000, 0x4fb9, 0xd, 0x8, 0x1d5, 0xffffffbe, 0x7fff, 0xf, 0x2, 0x1ea, 0xa77f, 0x6, 0x8, 0x9, 0xbe, 0x1, 0x3, 0x8, 0x9, 0x7c, 0x0, 0x4, 0x800]}, 0x45c) (async, rerun: 64) ioctl$TCSETA(r0, 0x8910, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) close(0x3) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async, rerun: 32) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000"]) (async, rerun: 32) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x34325842}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) (rerun: 32) r10 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) 6m45.184264038s ago: executing program 0 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf2, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf2, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e20, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x6c, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e20, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x6c, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="38827300", 0x4}], 0x1}}], 0x1, 0x0) (async) sendmmsg$sock(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="38827300", 0x4}], 0x1}}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4800) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070025bd7000fcdbdf251100000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4010084) 6m45.008610192s ago: executing program 0 (id=132): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700726f7574650000001400048008000240000000000800014010d8e8bd0900010073797a3100000000090003"], 0x94}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000f00)=0x1000000, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, &(0x7f0000000040)) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="829dbc65712b5ac13cc46782776de9e8e1e5b00aeb4fb2c83453be1d3ff9b43b364ac60b4cf69ebde1c5b2ab1b16321058d31f68291a01245662698aa5ad08dc3e1d0bb84357cc2c982c79d689c575ce92e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 6m43.158683723s ago: executing program 0 (id=136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000300000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x14c}}, 0x4810) 6m43.078465802s ago: executing program 0 (id=137): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xfffffffb) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000040)={@broadcast, @private=0xa010100, 0x0, "927cc5a50921c9187b2f92b467b3a98d807eb0d89f7f454f56c9b5d647221131", 0xd, 0x6, 0x5, 0xfffffffc}, 0x3c) 6m27.285411359s ago: executing program 32 (id=137): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xfffffffb) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000040)={@broadcast, @private=0xa010100, 0x0, "927cc5a50921c9187b2f92b467b3a98d807eb0d89f7f454f56c9b5d647221131", 0xd, 0x6, 0x5, 0xfffffffc}, 0x3c) 6m0.830716434s ago: executing program 3 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffd, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x15}) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x150, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0xd7, 0xc, "08d23b96e40847f83ad0c9ed64ff20e798c1ae47674ee078c4d0155fb6f4e524e752dacb82e868d02e03efca6a0364521106b3eae09d39e23dbe96c9d5e049760ae94a59a325f01aa5bb66a7411ec3a71605ac6ad420cf1b3aedad6d852fd6dcc692d8479684b4b804a3683f49031b7619b8a44e4eff1c32be178ff791f2bad033961fb3b0175d599e12dff1542340b26c84f9d270768b34472fb782f2849907c8bbbfa5539bf202366a541f36c2261911847f4a87e93db7b5a6f4fdb328f9c53b4a6d949722fde2d0a4e7d6c9cbfb797eab12"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6625}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x178}}, 0x0) 6m0.758655247s ago: executing program 3 (id=388): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x4, 0x1, 0xa, 0x12, 0x4, 0x81, 0xfffffffc, 0x6, 0x364, 0x1, 0x1, 0x20, 0x101, 0x8, 0x400009, 0x3, 0x5, 0x99, 0xcaa7, 0x80, 0x0, 0x7, 0x2000e67, 0x3c, 0xd, 0xfffffffe, 0x0, 0xfffffff8]}) 6m0.634677405s ago: executing program 3 (id=389): mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x8, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="63d2447dbe", 0x5}], 0x1, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b4b, &(0x7f0000000000)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x44, &(0x7f0000000380)={0x2, 0x4e25, @local}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) unlink(&(0x7f0000000100)='./file0\x00') write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 6m0.507024538s ago: executing program 3 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d42ffffb800000000000000000000000000010ff02000000000000000000000000000185"], 0x340a) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0xe0001, 0x0, {[0x4, 0x801f8, 0x7, 0x3, 0x3, 0x4, 0x7f, 0x4]}}) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x9c, 0x7, 0x0, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 5m59.984197507s ago: executing program 3 (id=395): socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r2}, './file0\x00'}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x208003, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001600), 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00000002000000", 0x57}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x2000c011) 5m59.821660991s ago: executing program 3 (id=397): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x4, 0x1, 0xa, 0x12, 0x4, 0x81, 0xfffffffc, 0x6, 0x364, 0x1, 0x1, 0x2000, 0x101, 0x8, 0x400009, 0x3, 0x5, 0x99, 0xcaa7, 0x80, 0x0, 0x7, 0x2000e67, 0x3c, 0xd, 0xfffffffe, 0x0, 0xfffffff8]}) 5m44.747036049s ago: executing program 33 (id=397): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x4, 0x1, 0xa, 0x12, 0x4, 0x81, 0xfffffffc, 0x6, 0x364, 0x1, 0x1, 0x2000, 0x101, 0x8, 0x400009, 0x3, 0x5, 0x99, 0xcaa7, 0x80, 0x0, 0x7, 0x2000e67, 0x3c, 0xd, 0xfffffffe, 0x0, 0xfffffff8]}) 5m32.954763945s ago: executing program 4 (id=570): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8d5, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00005500", [0x9, 0x2]}}) 5m32.634991051s ago: executing program 4 (id=574): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/89, 0x59}], 0x1, 0x0, 0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x0, 0x2, 0x0, 0x1, "5f6faf09d5b88232ff49fa9ed7c29671b0a7fa252d24a13946b83b95c0d0e390e37061afec4b06c4072ae7a8bbaee0ef21886b9f38b983da526c19f511f1809deb5a4052e5b358d4f8882260d626ad4c24618c741bb383affdfce5ece1beca1f867594bc1e402b5f30d463d158699df9b4d351870d9709"}, 0x87) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0xd3f, 0x3ff, 0x3, 0x2]}, &(0x7f0000000140)=0x78) 5m32.573502888s ago: executing program 4 (id=575): memfd_create(&(0x7f00000002c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xf2G\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3-\xce\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x04\x00\x00\x00\bZI\xaa\xe1\vd\xc8\xbe_\x9c\xc5\xa2\x80\xf1O\xc9\xaf\"\xc5d&c\xcd\xc5\xce\xb9Y\x9c\xf3\taH\xc2U\x06\xb1\x91\x8b+B\xb55\xab\x8a7\xefbh\x93\x96\xf5\xe1\xfa\xee8?\x96t\x8ek\xd3V\x11\x97\x94\xea\xc6[\x94\xd7R \x1f>\xe0\x85\x9f|=\x03@\xba\x9bDE\xb0\x98\xa0\x8a\xd3\x98\x12\x1f\x98\xda\xb1w\xd6t\x14\x17\xa5\x17.oH\xb9\t\xa7\x15!\x92\x9e\x8d!\x06\x05E\x11~u\b1\xb2\xee\xf0\xb9\xc8\xddwP\n\'\xe3\xf7\xb9\x81\xad\xa0\x97\x8b\x1f\x04\x9d\xb5\xd7\x83O\x1b\x9a\x83v\xc5\x85\x1b\xb1\x98\xca&\xfb\xe6\x1c\xa4ef\xfcp/\x02\xc1\v\x05\xa4\xe9\xf4\xb4\x83\xd6\"\xa0\x94\x15!9\xba5dh0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r4, 0xa07, 0x70bd2e, 0x259fdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20048840) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 5m30.7218518s ago: executing program 4 (id=591): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8d5, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00ab5600", [0x9, 0x2]}}) 5m30.311285461s ago: executing program 4 (id=596): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket(0x18, 0x6, 0x3) write(r1, &(0x7f0000000600)="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", 0xfd) 5m29.919736619s ago: executing program 34 (id=596): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket(0x18, 0x6, 0x3) write(r1, &(0x7f0000000600)="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", 0xfd) 3m20.717509781s ago: executing program 5 (id=1798): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8d5, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00000000dabe00", [0x9, 0x2]}}) 3m20.514982717s ago: executing program 5 (id=1800): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x3}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) (async) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8700) ioctl$DVB_DVR_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f00000000c0)={0x801, 0x4a3, 0xaa3, 0x200, 0x5, 0xfffffffa}) (async) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x5}) (async) r3 = socket(0x2b, 0x80801, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000002980)={0x0, @raw_data="5511bf1f8807aa865a124d4d643a2ff6fe4b48146e210400bac82b452ab20ebd48680c1b051153d2667fb057ee396b879e29b319abe128e6c27d6b1dd30adf0e057ae5cf12a0b8735e0c6abe5449f4c5e1425172447590b4f1572f337d874cd0cbe05d31d8f11f1deff37da6df01841c5407d0b389e89137e7d9a106eb4295699f5c29da46f1d2f785a92e77cf877f3e2b8a44589a4c1ef6f9dfaac52652838a7e1a21f1c97fbe5ae1da2334c9fb192b6db154f8cf0da061ebd3633616c16d544f217f92b081de0b"}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r4, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000002500)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x5f, 0x7, 0x100, 0xb8fa, 0xd6b8}, {0x74, 0x5, 0x2, 0xb408, 0x7, 0x8c4}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) (async) capset(&(0x7f0000000100)={0x20071026, r5}, &(0x7f0000000140)={0xffff, 0x7, 0x9, 0x37, 0xc0000000, 0x5}) (async) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) (async) r9 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) (async) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000002700)=@expire={0x280, 0x18, 0x400, 0x70bd25, 0x25dfdbfb, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x4e20, 0x6, 0x4e21, 0x6, 0xa, 0x20, 0x80, 0x6, r10, r4}, {@in6=@loopback, 0x4d3, 0x33}, @in=@rand_addr=0x64010102, {0x9, 0x1, 0x8000, 0x6, 0x9, 0x2, 0x8001, 0x31f}, {0x4, 0xaabf, 0x1, 0x6}, {0x4, 0x1ff, 0xfffff800}, 0x70bd2d, 0x34ff, 0xa, 0x4, 0x5, 0x4}, 0x4}, [@algo_auth_trunc={0xd3, 0x14, {{'crct10dif-generic\x00'}, 0x438, 0x100, "fa21b95f859dfa041b023c6f20255e2f751bb3b62da9bbe5f18877683eb504601a7639ff3da5929157e960a4a940ea8c8eef4aebe0871889ec334f079d84d43914b0761e3ef8738c3dbf62aebf9db932c18b91230dec1a44bba4575aed6dedf0f1ff7874597ddf1c8946773153adf5233f7f1a4a7e680fe0ae6ee70b73671d2098e2eed5f26bd8"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @algo_crypt={0xaa, 0x2, {{'ecb-camellia-aesni-avx2\x00'}, 0x310, "e159e11a165c686479346dc476bb596456577bfb32782ac3eca468ba0f82148ca17313fd42f7365cec156c9eb4224134e56be6f019c27bf5697fab7c5132cebf3cb5b70ec4b66484479a7b3576b57ec3ce7926da6ffe7429ef46e43ba74519911bfe"}}]}, 0x280}, 0x1, 0x0, 0x0, 0x22000004}, 0x4000810) 3m20.476718634s ago: executing program 5 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x80) 3m20.407083351s ago: executing program 5 (id=1802): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0xf2861000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0x9, 0x9, 0x1, 0x3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x3, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10005, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file1\x00', &(0x7f0000002040)={0x101140, 0x101, 0x8}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) write$P9_RSTATu(r4, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 3m19.636691063s ago: executing program 5 (id=1803): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339bc2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebc631d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c0100000000000000a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000a00", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r3, @ANYBLOB="040008000000000009000200", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000e00000000002000010000000000"], 0x64, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r5, &(0x7f0000000340)="8b0d37e311629e", 0x7, 0x6, 0x0, 0x0, r0}]) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') (async) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) (async) umount2(0x0, 0x2) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 3m19.399371537s ago: executing program 5 (id=1804): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000700)=[@in6={0xa, 0x4e23, 0xf535, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000}], 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "907b6ddde7639b87", "d09a7c0862cb2bf1507873191592221a913f73a487f217e8659e69376a2727f6", "54ca1852", "254b909e5ff492e6"}, 0x38) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 3m4.049532874s ago: executing program 35 (id=1804): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000700)=[@in6={0xa, 0x4e23, 0xf535, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000}], 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "907b6ddde7639b87", "d09a7c0862cb2bf1507873191592221a913f73a487f217e8659e69376a2727f6", "54ca1852", "254b909e5ff492e6"}, 0x38) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 2m41.186721948s ago: executing program 7 (id=2024): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4004850}, 0x24000840) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) write$sequencer(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="81010000000000009200b0"], 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000040)={0xfffffe3f, 0x0}) 2m41.148937299s ago: executing program 7 (id=2025): syz_usb_connect$uac3(0x5, 0x9f, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010640000007f80013240306ff01030424035ba8eb60b717f2a52ea49dff01fc2000000004004b00080009040100000102300009040101010102300009050109ff03090a020a25250400000082040009040200000102300009040201010102300009058209ff030900050a252580000040020b00e8f96383711908eec0dcbe151414b531a8f3b21378df4d76568092e7b4397158d8f1a399932c06ad0746"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x5, 0x240140) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x5, 0x7, 0x1}) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x164) (async, rerun: 32) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x5, 0x81, 0x42, @random="822ae57989a5"}, 0x10) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @vbi={0x0, 0x0, 0x59455247}}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x3, 0x4, {0x4, 0x21, "a708"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x20, 0x18, 0x6c, "bc589daf8e2aee1de849b1da34677d108863d0194211cc3ff4e03bb06db480ac4ddb99289f0473488ef31f38f3afeb2cfdefe4a96d34aec6b7328a4a90a0848f663fac2281480d178b1188ad705b376a063b35a8440c7dc92f5972b861266c669ad89d42eef2d0ba0fa87970"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2, 0x4104, 0x9, 0x7, 0x9, 0x9, 0x1, 0x8, 0x7fff, 0x7, 0xb, 0x400}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0xda53}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) (async) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) connect$unix(r7, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 32) lseek(r0, 0x40, 0x3) (async) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r8, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) shutdown(r8, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000000)={r10, 0x2}, &(0x7f0000000040)=0x8) 2m40.918830907s ago: executing program 7 (id=2027): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x40601) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0b45545, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/62, 0x3e}], 0x5}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000014c0), 0x191041, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001500)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000001540)={0x18, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r5) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x40601) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0b45545, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/62, 0x3e}], 0x5}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000014c0), 0x191041, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001500)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000001540)={0x18, r4}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r5) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) 2m40.866170938s ago: executing program 7 (id=2028): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close(r0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x733f) 2m37.802060454s ago: executing program 7 (id=2053): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x14c}, 0x1, 0x300}, 0x4810) 2m37.711082302s ago: executing program 7 (id=2055): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) 2m22.133255559s ago: executing program 36 (id=2055): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) 5.177059245s ago: executing program 8 (id=3114): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000024c0)=0xb, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) 5.132107557s ago: executing program 8 (id=3115): r0 = socket$kcm(0x10, 0x2, 0x0) read(r0, &(0x7f0000000000)=""/120, 0x78) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x8, 0x20, 0x6, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xffe, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x340b5, 0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000080)={0xad, 0x80}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="06001200800a0000040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.777808811s ago: executing program 6 (id=3118): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000440)=""/158, &(0x7f00000002c0)=0x9e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) process_madvise(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="5cc24ced5b6b3610e22a6c6f086c500876d057bf31648117df81d389aa8e1f79edd7f4c078afb8fc0390dd816793b04138a0cd103ee61ec88c331bb690f8bba68ecbe71c5dbdd3877cd1dfa6bff966ae76a314fbc92f2f68d48db0ab1898846acb91", 0x62}, {&(0x7f00000001c0)="2cac1b394614d4577e8b5bcbe4ce88daa72e8d3ba095a2095c5915cdcf01ae3dfed427286f6242b2ee10", 0x2a}, {&(0x7f0000000340)="e0db7036c71b65c017bb23ffac73dfb1de4a13bee3c53f57977ec7a91ba0af6b09881532f0dd7837d00b46371c2d36d9dabe2039a4ba6bc23f174cde92b7ab97cfb26158118a952257cb99df5a3359ced0d8938851a2f25b4a25ae86fd4563fcea8c40144be7b2fa5ededfe44f4672f3a3a1b91846bdf4c6ad601f22c685754718b90342097a4770baa4a55977661fef95f43a39c6622e51b0a72399377f9a71fa5b865f0ff75a80a55e9148a1a6a6dad25c88665c2ff28d19b157b9d32001440e1cad620ede5ff5", 0xc8}], 0x3, 0xc, 0x0) clock_adjtime(0x5, &(0x7f00000005c0)={0x8, 0xcb, 0x4, 0x67, 0x6, 0x8, 0xaa, 0xef, 0x7, 0xf3, 0xfffffffffffffffe, 0x4, 0x5, 0x8a6d04ae00000000, 0x7, 0x3, 0x0, 0x7, 0x9, 0xffffffffffffffff, 0xd2b0, 0x4, 0x7, 0x1ff, 0x6, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x17) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4.210590991s ago: executing program 8 (id=3123): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000300)={0x1100, 0x4, 0x0, 0x10000}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0xd, @raw_data="1567970cd5382fce78d46de43e4726b473fdb1cf1a7102511b5efd4d56240f61760944dc7c9b00021c2c4992f983392d43b98395ee1e13c188923bacb774d6eb890aff20a2838cea0790eb2a2290f9bbb27dc36b5c3f139abd420c054dde6c55148ca51fd959200d5508d3aaef53387220bc9e88fe8641b34c7d444fcaa1daba57d5bf36ee6a521e263d9e453e72ee0b684e951cd37d76c707a714d972459aae4ba405a4cd2ba15b339e1a0bfabc5fc079b4dc1725a2b8451e57a1f475951cf65af3b2f47102dd65"}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x111691) (async) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) shmget$private(0x0, 0xfffffffffeffffff, 0x4000000, &(0x7f0000ffc000/0x3000)=nil) (async) ioctl$USBDEVFS_CONNECTINFO(r6, 0x8004550f, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x73}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffff8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000) (async) r8 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x80) 4.088101414s ago: executing program 8 (id=3124): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x21}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0xf, 0x15, "accc09b77459d6adbb599ecb7f0b9e707ed3b71905"}, 0x0, 0x0, 0x0, &(0x7f0000000480)}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0xf, 0x15, "accc09b77459d6adbb599ecb7f0b9e707ed3b71905"}, 0x0, 0x0, 0x0, &(0x7f0000000480)}) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4250, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x0, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x4, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x8, 0x9, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x99, 0x1, {0x8, 0x25, 0x1, 0x80, 0xc, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0x3, 0x5, {0x8, 0x25, 0x1, 0x0, 0x30, 0x5, 0xe3f}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x0, 0x0}, {0x17, &(0x7f0000000040)=@string={0x17, 0x3, "6aab2e241b168c046c0080000000000000e3bbd82b"}}]}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x49}, "84d67798ec715ed005a472f1a6494ed176796fd168a752174940c3fb202fd182fceecec5a7033b7e0f54ec2df398c27d4f4d8ba291d88120a4305191fb32667e94347adf9d8f15d649"}, 0x4d) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x49}, "84d67798ec715ed005a472f1a6494ed176796fd168a752174940c3fb202fd182fceecec5a7033b7e0f54ec2df398c27d4f4d8ba291d88120a4305191fb32667e94347adf9d8f15d649"}, 0x4d) 4.070573586s ago: executing program 6 (id=3125): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 4.014183976s ago: executing program 2 (id=3127): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x4, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x1}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x4, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x1}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) (async) 3.879041317s ago: executing program 6 (id=3129): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300"], 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x200001d0) 2.865106298s ago: executing program 1 (id=3131): ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x9, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x3a4, 0x35, 0x100, 0x70bd27, 0x25dfdbfe, {0xa}, [@generic="e476d5d9531f353ef75c5ad3151435da81ef2733fd1f4e455257c6a8e319438fc5389391a5101ef813abf1641787d88a268b6839ac40e5b8a6f7b32ee9a544747396e3b7120fe716ae66126594cf617fbcfe19ecc9aba5deff92ea7e1436df1db4499157028f3e1101777fb4b8cfb73a4e1afd1196feb39d8567f3c9ec55e286e5d885d773eadd3a5efb8d16ec6cebcf8ec9bfb1626f1e8006e7aa3916b6ee886f4b1e3815fcb52a054e8d026a26a35400b4b17d2aa6e8773ea422d29fd96cdf68365368ffb75c513b74876f", @typed={0xc, 0x36, 0x0, 0x0, @u64=0x2}, @generic="7b4e6892cf0b5dc49de24488c47c70ae1c55bfe18fc979d8f7dfc05016436d357e0b6ce0475df8ab1db534", @nested={0x24c, 0x43, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @uid=r1}, @nested={0x4, 0xe6}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x40000}, @generic="ce939992440b5b59bf0d092b9b8937776dada87209d438dfed727bd4947c28834aa52463c3d946c5768cf422d9212c5b686492752ebe343043c77cd182edfc1cbc4e5c24d445b34aa1682bdcf7d4172976bee6258830471c0bb260e5841edb48716b5a826c6094a4559f20815d3b99fb428f823d7bff9ab8aaeab44d7d30f1b2ece0222f0358982c920a2f7de07c9d5129fe3781256a5ea25076227afeb048d9a8b5e68af6b18afe678b2f0153091f61a31b0d94a6bbe8a6ebe4bcf35f5222d23353a508a2cff1d8f98e1c17d3091a", @generic="dd62cfc2be2eac2fd9421d9a31648acc63b3a8be8c6fac36c44d0cfe27113c5bc9ee0d97f818fd48b9f6ee973f3e400fd706f546de4e54044295aa4cb20b2aa2a9aec81f8c4a81f20a297ae0dc8f3d1591c2b6989a70737e178bf28d90d375afbdac3c4effd22daf38350792c7230e974d37baa332ca13fad98bb8989b632f22e32b855401b1648d32d781d6d4a914f4d31d04a5e591ae62b5ef24962052c72624293aa7afafa266361e35fbc001ef0c7bd82001e5723e825d9f2bb88fec4003cc8e1bd2e762ec436c9e9c608384fb6315ed6fadd9aac0888b1f3028b59667ab200c2e4ab13fb0e4b6d5e9ca47", @nested={0x4, 0x10f}, @generic="50b08e965aa34459f14971efa6954537748ff9eec835cb20bffb3d0d973ffee59fe23713a81391df2457dbe12f8ec68dc7e4f507d28d710c5b43150484dd8f17ee9ab4f573a69e6325b777f1cedcffd9b4b1a6f0fc3ec7628056974601ed34f1fa416a448ed42bd1ac598f1aac42b65799b44bb1"]}, @typed={0x8, 0x32, 0x0, 0x0, @uid=r2}, @nested={0x14, 0x11d, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0x71}, @nested={0x4, 0xe8}]}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x1}, @nested={0x18, 0x115, 0x0, 0x1, [@typed={0x14, 0x37, 0x0, 0x0, @ipv6=@remote}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4}, 0x20040081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000180}, 0x48881) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x88, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x70000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x669}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}}, 0x20000000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)={0x2, 0x3, 0x4, 0x8, 0x20, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x21, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x22, 0x4}, @sadb_x_sec_ctx={0xe, 0x18, 0x1, 0x9, 0x66, "fdc796b60afc6e1dd56b9ad4b46bdcb68dd67bebce7026d9cf93fa8d74e19282ce2447ff8da4953ff0d0cb4f5a8988b45b56f3f1cbc9d64ca37e5c7cdec0c95425d70eeee8a242ad29f62530fe66f9eb381a7a752969f44737a447dbf5f0806a40a6e5debc37"}, @sadb_lifetime={0x4, 0x4, 0x50d, 0x2, 0x8, 0xad2c}]}, 0x100}}, 0x80000) r7 = gettid() process_vm_readv(r7, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/67, 0x43}, {&(0x7f0000000b80)=""/35, 0x23}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000000c80)}], 0x4, &(0x7f0000000f80)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/171, 0xab}, {&(0x7f0000000e00)=""/126, 0x7e}, {&(0x7f0000000e80)=""/208, 0xd0}], 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000001000)={0x4, &(0x7f0000000fc0)=[{0xc, 0xaa, 0x9, 0x8}, {0x7fff, 0x9, 0x7, 0x1}, {0x2, 0x4, 0xde, 0xc98}, {0x63, 0x8, 0x4, 0x6}]}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001040), 0x8a040, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r8, 0xc0106440, &(0x7f0000001100)={0x0, 0x1e60, &(0x7f0000001080)}) ptrace$poke(0x4, r7, &(0x7f0000001140), 0x4) socket$phonet(0x23, 0x2, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048040}, 0x40000) ptrace$poke(0x5, r7, &(0x7f00000012c0), 0x5) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe8c508a90bda2366}, 0x4020) r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001400), 0x474042, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000001440)={0x3, {{0x2, 0x4e23, @empty}}, 0x1, 0x5, [{{0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @multicast2}}]}, 0x310) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x80001, 0x0) pwritev(r12, &(0x7f0000003ac0)=[{&(0x7f00000017c0)="e883294fe971971b33942ad9970a66380cc74f2e78554ce7631cd55dac0745be5efbef0464058d643e5d645efac6b3fad0720d692df06bd49340549927deda8306c37afa", 0x44}, {&(0x7f0000001840)="821f656748a13aa2b8de4d77d3944ded3f6a0ada93a29f415ab8a0692aac1b9fcbfca3b82903e2d9a72fae430f0281f9177415e652a7d4f71573a5dad220eef96c5982920e1734250bb860cc9a559285340ff94306a59710e5ea4a2ce2700fdbdeb8c785f3d723b0b435fcb2458a81d17332ce30ab79c90c8c7114630c63876c0d5edbc23d300085eeec23e045e11c82445f3b9aee3062d89b3630d4d685c2a49e9fc53c71ffd15fca0714a60413a3fa278a2be5541fdcbd35512b67e3668fa144a44bc28b776659e590d74140b2d9d919e6a4a33af91fb61f0a46ae97bd7d35fc10fabd0b71d9fabd325ba03a8c39b1183852d15014", 0xf6}, {&(0x7f0000001940)="55043f6d3713c24369623f2cec0df23a815405eb850acab333b6fbc8e32eace589ddd7fb493d40b55cd813d9fcbad3dbee3b57e761b72a68ef6fb89265c51b69b7b04c2d5863e4343c82e13f3ecc161e261ab6d92f5bd9a530d28b03675ea74b4b31d09a8047c34950888d507f19f867ebd5b64fb76f40b5853e1fac5725d05028de3e139f9c058d3e6d0144e6d25a276b964dc92fe134c118847e5840f51556f6cda429c18c2702fbc3cc52623adabb4b9fddbb4a0bd238aa944b7b19f667168a10620fb3904f011fb1d9f5c2b8f6085914e0d6f5f53dbc036086d2875dffa11299fe230e8f300d841425e523d7b702e4bae8", 0xf3}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="43553886431cb72359f1c470f509d5164558f502d9db277d804f9647f57f176d4ade8ff789b873d588ba71a8173287203ffcce0645e4f4c81d303aa84b317b5b6773b98f3a4c9196388afc07dfcba712", 0x50}, {&(0x7f0000002ac0)="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", 0x1000}], 0x6, 0x6, 0x401) r13 = syz_clone3(&(0x7f0000004c80)={0x0, &(0x7f0000003b40), &(0x7f0000003b80), &(0x7f0000003bc0), {0x3}, &(0x7f0000003c00)=""/8, 0x8, &(0x7f0000003c40)=""/4096, &(0x7f0000004c40)=[r7, r7, r7, r7], 0x4, {r11}}, 0x58) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000004d00)=r13) 2.756989457s ago: executing program 1 (id=3132): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x800000, 0x0) 2.65455376s ago: executing program 1 (id=3133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004000f"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0xc8, &(0x7f0000000100)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8aa401, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000000000000000000a0000010900020073797a3100000000090001ffff797a3100000000100003800c0000800800034000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="1f0033"], 0x3c}}, 0x480d0) 2.643264469s ago: executing program 1 (id=3134): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8d5, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00000000000000000000004b534452", [0x9, 0x2]}}) 2.613670842s ago: executing program 6 (id=3135): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000007c0)={0x36f, @tick=0xffff, 0x83, {0x3, 0xae}, 0x9, 0x1, 0x80}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 2.490509474s ago: executing program 1 (id=3136): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f9a35133264f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x3}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709a70000000000000101000000080009003f000000050021000100000006000a0001000000000080000000000043f915355920c0dd83a40ad976411af97acaa149127b66"], 0x34}, 0x1, 0x0, 0x0, 0x4004045}, 0x8090) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04080401c90001f6309753a7221c88c0a0f3d5212fa0290eb49eeebf0474759ef8c8753b6df0e866dda6b3341845f5058d7c5453d90ccf0c854a21d4292f734f8558dec5049e"], 0x7) syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) sync() syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000700)={0x20, 0x9, 0x63, "a67d05be86565545cf638d18ced9310aca1cd465ce5a4ef78cebd83476f95c24ca5ac6f2a67c83c31d036ffa8abfec5d3fd2723005ae19ebec1a2e8045bcbd371d72be7580579e7de96c92d8765600bc76bffa78ad3fbcd9603c479881a79072495170"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5b}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000280)=ANY=[@ANYBLOB="20013100009031e9517e4af7405160be5bc136e4e812310028c7678562662a5062821f2beb294a72c93e66983045d5da644cc1af651dc7e815b63e68b19e4451fdb40725dfdcce95eca7aadf"], 0x0}) syz_emit_vhci(0x0, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0xefffffff, 0x4004000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', 0x0}) r7 = semget(0x3, 0x2, 0x0) semctl$SETVAL(r7, 0x3, 0x10, &(0x7f0000000000)=0x80) 2.48882527s ago: executing program 6 (id=3137): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) process_mrelease(0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0xfffffffffffffffe, 0x2, 0x3, 0x1, 0x4, 0x7ffffffc}) fchown(r0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0xfffffffffffffffe, 0x2, 0x3, 0x1, 0x4, 0x7ffffffc}) (async) fchown(r0, 0xee00, 0x0) (async) 2.438545619s ago: executing program 6 (id=3138): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a80)={'veth0_to_bond\x00', &(0x7f0000001040)=@ethtool_flash={0x26, 0x8000, './file0\x00'}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) syz_usb_connect$uac2(0x3, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="120150020000004082057d004000010203010902740003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000b2401020003310b068d9a09050109000232000908250102300001000904020000010220000904"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r3) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @remote}}}, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='\x00', 0x0, 0x4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x40, 0x80) mount(&(0x7f0000000100)=@nullb, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000000)='romfs\x00', 0x2008087, 0x0) 952.048746ms ago: executing program 8 (id=3139): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000100)={0x0, 0x1, 0x9, 0x1, &(0x7f0000000040)=[{0x2, 0xfff, 0x401, 0x401}]}) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8d5, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000004000", "90be8b1c55080000000c547d03d8a0f4bd00", [0x9, 0x2]}}) 885.799094ms ago: executing program 2 (id=3140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect(r0, &(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_set_ext_adv_enable={{0x2039, 0x2}, {0x9a, 0xca}}}, 0x6) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 694.536453ms ago: executing program 8 (id=3141): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="38827300", 0x4}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000001c0), 0x80, 0x1, 0x0, &(0x7f0000000180), 0x20000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2201}, 0x18, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) write(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560aff820fffff5bab00070000940f6a0325010ebc000000000000008000f0fffeffe009005300fff5dd00000010000100030c100000000000224e00"/88, 0x58}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1) landlock_restrict_self(r1, 0xf) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='\x03{\x00\x00\x00\x00\x00\x00') chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r6, 0xee01, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0040000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120400010003080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 654.973536ms ago: executing program 2 (id=3142): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 305.503514ms ago: executing program 1 (id=3143): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x83, 0x2, "93bd"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, "29d8"}, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x40, 0x13, 0x3, "03caa0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2f02, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) ppoll(&(0x7f00000000c0)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) 210.794872ms ago: executing program 2 (id=3144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async, rerun: 64) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x60aa, &(0x7f0000000200)={0x0, 0x989680}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x0, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x11) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) (async, rerun: 64) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$FBIOPAN_DISPLAY(r6, 0x4606, &(0x7f0000000200)={0xf0, 0x360, 0xf0, 0x4b0, 0xa15d, 0x0, 0x4, 0x1, {0x528a5432, 0x1ff, 0x1}, {0xf, 0x8}, {0x8, 0x1ff, 0x1000}, {0x1, 0xa5, 0x1}, 0x1, 0x1, 0x7, 0x10001, 0x0, 0x1, 0x1, 0x0, 0x9, 0x6, 0x1, 0x1, 0x8, 0x4, 0x0, 0xa}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x100}) (async, rerun: 32) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x20000800) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000110019b0a3782ca88c15a9310dcde34e"], 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) 203.036042ms ago: executing program 2 (id=3145): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8d5, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd000000000000000000000000000055", [0x9, 0x2]}}) 0s ago: executing program 2 (id=3146): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019640)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x15}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="df000000"], 0x14c}}, 0x4810) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000600)={0xbfe6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x8d, "e59d3d04067718"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001880)={r7, 0x0, "e5d79040e90e8eac38c55d9cccda739ba5425e4be837a0c37de615e16c9baf5ffd6b04be201bd342486633d1d24f52b1440e8f3bb9d1b4b407de3f485ec0fb8ab015851626a29b7043819187c0ce8c17721950be3d83299d3c88ceb693554ee0cae37f9a2a37addc3dcb59f62a569e996bac91e3d57bbe29bdebbff313fbc4ae8cb445de96e79e1ffd7c11cff1fa86c9ae26ebcdbc1ce8dded45135853acf44c44cca6668f61d072f086c900f4cd5e8483619d8315dca25989afcbd2b06c9c0b13b1970adc28bec2a00133cf7fa37149ec1737698aa6cbccb19c4d97b141700bc513766ba468647f3d499d62778123325d328a43eccbd6b7c642749c40986d61", "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"}) kernel console output (not intermixed with test programs): g attributes in process `syz.8.2750'. [ 438.298268][ T5832] usb 2-1: config 0 descriptor?? [ 438.306519][T14675] netlink: 'syz.6.2751': attribute type 13 has an invalid length. [ 438.321206][ T5832] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 438.419975][T14670] bridge0: entered allmulticast mode [ 438.436632][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.464868][T14671] bridge_slave_1: left allmulticast mode [ 438.474214][T14671] bridge_slave_1: left promiscuous mode [ 438.480114][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.497435][T14671] bridge_slave_0: left allmulticast mode [ 438.503286][T14671] bridge_slave_0: left promiscuous mode [ 438.509173][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.559957][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.573069][T14671] bridge0 (unregistering): left allmulticast mode [ 438.579532][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.587655][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.588014][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.647144][ T7732] Bluetooth: hci4: Dropping invalid advertising data [ 438.648407][ T5890] usb 2-1: USB disconnect, device number 92 [ 438.654208][ T7732] Bluetooth: hci4: Dropping invalid advertising data [ 438.667265][ T7732] Bluetooth: hci4: unknown advertising packet type: 0x0d [ 438.667290][ T7732] Bluetooth: hci4: Malformed LE Event: 0x02 [ 438.873010][T14689] loop1: detected capacity change from 0 to 4 [ 438.883822][ T5974] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 438.903076][T14689] Dev loop1: unable to read RDB block 4 [ 438.918942][T14689] loop1: unable to read partition table [ 438.933599][T14689] loop1: partition table beyond EOD, truncated [ 438.939977][T14689] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.047234][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 439.060284][ T5974] usb 7-1: unable to get BOS descriptor or descriptor too short [ 439.069217][ T5974] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 439.077954][ T5974] usb 7-1: config 128 has an invalid descriptor of length 124, skipping remainder of the config [ 439.096728][ T5974] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 439.117458][ T5974] usb 7-1: config 128 has no interface number 0 [ 439.124099][ T5974] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 439.135849][ T5974] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.147250][ T5974] usb 7-1: config 128 interface 127 has no altsetting 0 [ 439.157492][ T5974] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 439.167283][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.177826][ T5974] usb 7-1: Product: syz [ 439.182022][ T5974] usb 7-1: Manufacturer: syz [ 439.191540][ T5974] usb 7-1: SerialNumber: syz [ 439.223387][ T139] hsr_slave_0: left promiscuous mode [ 439.234224][ T139] hsr_slave_1: left promiscuous mode [ 439.240517][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.248504][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.259698][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.275620][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.290380][ T139] veth1_macvtap: left promiscuous mode [ 439.296163][ T139] veth0_macvtap: left promiscuous mode [ 439.301763][ T139] veth1_vlan: left promiscuous mode [ 439.307265][ T139] veth0_vlan: left promiscuous mode [ 439.424415][ T7732] Bluetooth: hci6: command tx timeout [ 439.515007][T14696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 439.570664][ T5974] usb 7-1: USB disconnect, device number 110 [ 439.604882][T13918] udevd[13918]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.792963][T14700] overlayfs: maximum fs stacking depth exceeded [ 439.794665][ T139] team_slave_1 (unregistering): left promiscuous mode [ 439.806274][ T139] team_slave_1 (unregistering): left allmulticast mode [ 439.807475][T14700] netlink: 'syz.1.2756': attribute type 10 has an invalid length. [ 439.828184][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.837280][ T139] team0 (unregistering): Port device team_slave_1 removed [ 439.855489][ T139] team_slave_0 (unregistering): left promiscuous mode [ 439.862269][ T139] team_slave_0 (unregistering): left allmulticast mode [ 439.870969][ T139] team0 (unregistering): Port device team_slave_0 removed [ 440.072833][T14560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.132201][T14560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.194585][T14711] loop1: detected capacity change from 0 to 4 [ 440.208716][T14560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.220464][T14711] Dev loop1: unable to read RDB block 4 [ 440.240977][T14560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.255660][T14711] loop1: unable to read partition table [ 440.281355][T14711] loop1: partition table beyond EOD, truncated [ 440.339114][T14711] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.643141][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.710310][T14735] loop1: detected capacity change from 0 to 4 [ 440.728668][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.738085][T14735] Dev loop1: unable to read RDB block 4 [ 440.751372][T14735] loop1: unable to read partition table [ 440.764357][T14735] loop1: partition table beyond EOD, truncated [ 440.780790][T14735] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.792799][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.799984][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.910054][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.917290][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.005352][T14746] syz.8.2763(14746): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 441.035398][T14746] netlink: 'syz.8.2763': attribute type 1 has an invalid length. [ 441.043423][T14740] virt_wifi0 speed is unknown, defaulting to 1000 [ 441.055363][T14746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.103734][T14740] xfrm0 speed is unknown, defaulting to 1000 [ 441.490199][T14767] loop1: detected capacity change from 0 to 4 [ 441.503909][ T5829] Bluetooth: hci6: command tx timeout [ 441.512023][T14767] Dev loop1: unable to read RDB block 4 [ 441.533955][T14767] loop1: unable to read partition table [ 441.556791][T14767] loop1: partition table beyond EOD, truncated [ 441.573426][T14767] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 441.629625][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.649422][T14771] loop1: detected capacity change from 0 to 4 [ 441.656965][T14771] Dev loop1: unable to read RDB block 4 [ 441.662625][T14771] loop1: unable to read partition table [ 441.670624][T14771] loop1: partition table beyond EOD, truncated [ 441.683533][T14771] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 441.793375][ T5890] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 441.859420][T14560] veth0_vlan: entered promiscuous mode [ 441.936719][T14560] veth1_vlan: entered promiscuous mode [ 441.950131][ T5890] usb 7-1: unable to get BOS descriptor or descriptor too short [ 441.980034][ T5890] usb 7-1: config 7 has an invalid interface number: 208 but max is 0 [ 441.997921][ T5890] usb 7-1: config 7 has no interface number 0 [ 442.013935][ T5890] usb 7-1: config 7 interface 208 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 442.037772][ T5890] usb 7-1: config 7 interface 208 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 442.062231][ T5890] usb 7-1: config 7 interface 208 has no altsetting 0 [ 442.080720][ T5890] usb 7-1: New USB device found, idVendor=0a07, idProduct=00c8, bcdDevice=bd.07 [ 442.099056][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.114387][ T5890] usb 7-1: Product: syz [ 442.121186][ T5890] usb 7-1: Manufacturer: syz [ 442.127392][ T5890] usb 7-1: SerialNumber: syz [ 442.232264][T14560] veth0_macvtap: entered promiscuous mode [ 442.248572][T14560] veth1_macvtap: entered promiscuous mode [ 442.280801][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2774'. [ 442.351100][ T5890] adutux 7-1:7.208: interrupt endpoints not found [ 442.376282][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.391721][ T5890] usb 7-1: USB disconnect, device number 111 [ 442.431022][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.502826][ T3537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.517308][ T3537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.521131][T14786] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2775'. [ 442.526304][ T3537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.546679][ T3537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.771498][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.788423][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.851940][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.859996][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.987407][T14793] loop1: detected capacity change from 0 to 4 [ 442.999570][T13918] Dev loop1: unable to read RDB block 4 [ 443.017704][T13918] loop1: unable to read partition table [ 443.032655][T14794] veth1_macvtap: left promiscuous mode [ 443.038480][T13918] loop1: partition table beyond EOD, truncated [ 443.042345][T14794] macsec0: entered promiscuous mode [ 443.053074][T14793] Dev loop1: unable to read RDB block 4 [ 443.061860][T14794] veth1_macvtap: entered promiscuous mode [ 443.068122][T14793] loop1: unable to read partition table [ 443.069981][T14794] macsec0: left promiscuous mode [ 443.082803][T14793] loop1: partition table beyond EOD, truncated [ 443.094393][T14793] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.251561][T14801] loop1: detected capacity change from 0 to 4 [ 443.260628][T14801] Dev loop1: unable to read RDB block 4 [ 443.268235][T14801] loop1: unable to read partition table [ 443.274635][T14801] loop1: partition table beyond EOD, truncated [ 443.283688][T14801] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.583480][ T5829] Bluetooth: hci6: command 0x0405 tx timeout [ 443.691735][T14822] loop1: detected capacity change from 0 to 4 [ 443.699365][T13918] Dev loop1: unable to read RDB block 4 [ 443.705184][T13918] loop1: unable to read partition table [ 443.713495][T13918] loop1: partition table beyond EOD, truncated [ 443.723639][ T5876] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 443.751552][T14822] Dev loop1: unable to read RDB block 4 [ 443.769762][T14822] loop1: unable to read partition table [ 443.779649][T14822] loop1: partition table beyond EOD, truncated [ 443.788483][T14822] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.892883][T14826] loop1: detected capacity change from 0 to 4 [ 443.903975][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 443.912636][T14826] Dev loop1: unable to read RDB block 4 [ 443.922537][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.932774][T14826] loop1: unable to read partition table [ 443.942930][T14826] loop1: partition table beyond EOD, truncated [ 443.949306][ T5876] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.966087][T14826] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.979403][ T5876] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 444.010939][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.039072][ T5876] usb 3-1: Product: syz [ 444.046649][T14829] netlink: 'syz.8.2790': attribute type 10 has an invalid length. [ 444.064952][ T5876] usb 3-1: Manufacturer: syz [ 444.070249][ T5876] usb 3-1: SerialNumber: syz [ 444.112554][T14829] netlink: 'syz.8.2790': attribute type 5 has an invalid length. [ 444.127164][T14829] netlink: 'syz.8.2790': attribute type 9 has an invalid length. [ 444.217217][T14838] netlink: 'syz.6.2792': attribute type 21 has an invalid length. [ 444.316174][ T5876] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.327827][ T5876] usb 3-1: MIDIStreaming interface descriptor not found [ 444.373701][ T5925] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 444.390940][ T5876] usb 3-1: USB disconnect, device number 50 [ 444.435385][ T5974] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 444.447316][T12034] udevd[12034]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.554033][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 444.561151][ T5925] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.569475][ T5925] usb 9-1: config 0 has no interface number 0 [ 444.579193][ T5925] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 444.591013][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.599298][ T5925] usb 9-1: Product: syz [ 444.603968][ T5925] usb 9-1: Manufacturer: syz [ 444.608608][ T5925] usb 9-1: SerialNumber: syz [ 444.613804][ T5974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.626194][ T5974] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 444.638660][ T5925] usb 9-1: config 0 descriptor?? [ 444.650963][ T5925] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 444.659699][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.671812][ T5974] usb 2-1: config 0 descriptor?? [ 444.682800][ T5974] smsusb:smsusb_probe: board id=8, interface number 0 [ 444.691221][ T5974] smsusb:smsusb_probe: Device initialized with return code -19 [ 444.714487][T14857] loop1: detected capacity change from 0 to 4 [ 444.722003][T11936] Dev loop1: unable to read RDB block 4 [ 444.728109][T11936] loop1: unable to read partition table [ 444.734729][T11936] loop1: partition table beyond EOD, truncated [ 444.744471][T14857] Dev loop1: unable to read RDB block 4 [ 444.751569][T14857] loop1: unable to read partition table [ 444.757910][T14857] loop1: partition table beyond EOD, truncated [ 444.765786][T14857] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 444.889809][ T5876] usb 2-1: USB disconnect, device number 93 [ 444.914915][T14865] loop1: detected capacity change from 0 to 4 [ 444.924266][T12042] Dev loop1: unable to read RDB block 4 [ 444.929942][T12042] loop1: unable to read partition table [ 444.936061][T12042] loop1: partition table beyond EOD, truncated [ 444.967532][T14865] Dev loop1: unable to read RDB block 4 [ 444.973378][T14865] loop1: unable to read partition table [ 444.979367][T14865] loop1: partition table beyond EOD, truncated [ 444.985891][T14865] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.333343][ T5876] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 445.493877][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 445.508860][ T5876] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 445.527422][ T5876] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 445.544691][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 445.552986][ T5876] usb 7-1: Product: syz [ 445.559536][ T5876] usb 7-1: Manufacturer: syz [ 445.566891][ T5876] usb 7-1: SerialNumber: syz [ 445.578279][ T5876] usb 7-1: config 0 descriptor?? [ 445.584973][T14868] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 445.595779][ T5876] hub 7-1:0.0: bad descriptor, ignoring hub [ 445.602201][ T5876] hub 7-1:0.0: probe with driver hub failed with error -5 [ 445.733374][ T5974] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 445.795892][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.808436][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.886875][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 445.896701][ T5974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 445.907007][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 445.916917][ T5974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 445.922234][T14827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.926793][ T5974] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 445.926818][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.932254][ T5974] usb 3-1: config 0 descriptor?? [ 445.938242][ T5876] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 445.948184][ T5925] gspca_spca1528: reg_w err -71 [ 445.975072][ T805] usb 7-1: USB disconnect, device number 112 [ 445.984362][ T5925] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 446.005684][ T5925] usb 9-1: USB disconnect, device number 43 [ 446.116323][ T5876] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 446.125506][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.135830][ T5876] usb 2-1: config 0 descriptor?? [ 446.145840][ T5876] cp210x 2-1:0.0: cp210x converter detected [ 446.174678][T14872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.184067][T14872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.207006][ T5974] hdpvr 3-1:0.0: firmware version 0xf6 dated Uýö-** [ 446.214005][ T5974] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 446.343692][ T5876] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 446.351366][ T5876] cp210x 2-1:0.0: querying part number failed [ 446.361394][ T5876] usb 2-1: cp210x converter now attached to ttyUSB0 [ 446.422411][T14885] loop1: detected capacity change from 0 to 4 [ 446.432454][T14885] Dev loop1: unable to read RDB block 4 [ 446.440159][T14885] loop1: unable to read partition table [ 446.446330][T14885] loop1: partition table beyond EOD, truncated [ 446.452548][T14885] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.465813][ T5974] hdpvr 3-1:0.0: device init failed [ 446.483514][ T5974] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 446.519121][ T5974] usb 3-1: USB disconnect, device number 51 [ 446.611210][ T5925] usb 2-1: USB disconnect, device number 94 [ 446.643025][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 446.653689][ T5925] cp210x 2-1:0.0: device disconnected [ 446.689803][T14892] loop1: detected capacity change from 0 to 4 [ 446.696821][T14892] Dev loop1: unable to read RDB block 4 [ 446.702487][T14892] loop1: unable to read partition table [ 446.709237][T14892] loop1: partition table beyond EOD, truncated [ 446.715943][T14892] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.790560][T14897] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.2811'. [ 447.065838][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2813'. [ 447.078806][T14905] random: crng reseeded on system resumption [ 447.094190][ T5925] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 447.147429][T14907] loop1: detected capacity change from 0 to 4 [ 447.161642][T13918] Dev loop1: unable to read RDB block 4 [ 447.162371][ T36] Bluetooth: hci3: Frame reassembly failed (-84) [ 447.171394][T13918] loop1: unable to read partition table [ 447.179715][T14905] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 447.183581][T13918] loop1: partition table beyond EOD, truncated [ 447.201435][T14907] Dev loop1: unable to read RDB block 4 [ 447.201478][T14907] loop1: unable to read partition table [ 447.201626][T14907] loop1: partition table beyond EOD, truncated [ 447.201656][T14907] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 447.263395][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 447.286875][ T5925] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 447.323357][ T5925] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 447.350065][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.366522][ T5925] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x48, changing to 0x8 [ 447.383045][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 447.394619][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8 has invalid wMaxPacketSize 0 [ 447.407542][ T5925] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 447.407577][ T5925] usb 7-1: config 168 interface 0 has no altsetting 0 [ 447.430229][ T5925] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 447.430266][ T5925] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 447.430302][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.430331][ T5925] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x48, changing to 0x8 [ 447.430356][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 447.430382][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8 has invalid wMaxPacketSize 0 [ 447.430405][ T5925] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 447.430432][ T5925] usb 7-1: config 168 interface 0 has no altsetting 0 [ 447.431704][ T5925] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 447.549574][ T5925] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 447.560887][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.595141][ T5925] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x48, changing to 0x8 [ 447.609883][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 447.621762][ T5925] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8 has invalid wMaxPacketSize 0 [ 447.641296][ T5925] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 447.657202][T14920] loop1: detected capacity change from 0 to 4 [ 447.663999][ T5876] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 447.669849][ T5925] usb 7-1: config 168 interface 0 has no altsetting 0 [ 447.676280][T14920] Dev loop1: unable to read RDB block 4 [ 447.682563][ T5925] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 447.684636][T14920] loop1: unable to read partition table [ 447.694654][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.702248][T14920] loop1: partition table beyond EOD, [ 447.709138][ T5925] usb 7-1: Product: syz [ 447.710533][T14920] truncated [ 447.714883][ T5925] usb 7-1: Manufacturer: syz [ 447.720693][T14920] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 447.726608][ T5925] usb 7-1: SerialNumber: syz [ 447.826658][ T5876] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 447.838088][ T5876] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 447.847817][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.863698][ T5876] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 447.968765][ T5925] adutux 7-1:168.0: interrupt endpoints not found [ 447.980229][ T5925] usb 7-1: USB disconnect, device number 113 [ 448.062028][ T5974] usb 3-1: USB disconnect, device number 52 [ 448.133676][ T5876] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 448.659311][T14936] loop1: detected capacity change from 0 to 4 [ 448.667953][T13918] Dev loop1: unable to read RDB block 4 [ 448.673730][T13918] loop1: unable to read partition table [ 448.679641][T13918] loop1: partition table beyond EOD, truncated [ 448.688234][T14936] Dev loop1: unable to read RDB block 4 [ 448.694806][T14936] loop1: unable to read partition table [ 448.700602][T14936] loop1: partition table beyond EOD, truncated [ 448.707352][T14936] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.776936][T14938] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2825'. [ 448.802211][T14938] netlink: 'syz.2.2825': attribute type 1 has an invalid length. [ 448.876410][ T5974] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 449.033396][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 449.041635][ T5974] usb 7-1: too many configurations: 34, using maximum allowed: 8 [ 449.050567][ T5974] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 449.059265][ T5974] usb 7-1: can't read configurations, error -22 [ 449.183369][ T5829] Bluetooth: hci3: command 0x1003 tx timeout [ 449.183402][ T7732] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 449.190971][ T6352] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 449.196178][ T5974] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 449.280153][T14944] loop1: detected capacity change from 0 to 4 [ 449.287133][T14944] Dev loop1: unable to read RDB block 4 [ 449.292814][T14944] loop1: unable to read partition table [ 449.300387][T14944] loop1: partition table beyond EOD, truncated [ 449.306803][T14944] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 449.378642][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 449.385533][ T5974] usb 7-1: too many configurations: 34, using maximum allowed: 8 [ 449.395204][ T5974] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 449.404940][ T5974] usb 7-1: can't read configurations, error -22 [ 449.412040][ T5974] usb usb7-port1: attempt power cycle [ 449.419054][ T6352] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 449.438608][ T6352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.456193][ T6352] usb 3-1: Product: syz [ 449.460729][ T6352] usb 3-1: Manufacturer: syz [ 449.466304][ T6352] usb 3-1: SerialNumber: syz [ 449.478834][ T6352] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 449.497380][ T805] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 449.763394][ T5974] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 449.784038][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 449.789858][ T5974] usb 7-1: too many configurations: 34, using maximum allowed: 8 [ 449.800169][ T5974] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 449.808896][ T5974] usb 7-1: can't read configurations, error -22 [ 449.907008][T14942] ALSA: mixer_oss: invalid index 100000 [ 449.943433][ T5974] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 449.973834][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 449.979597][ T5974] usb 7-1: too many configurations: 34, using maximum allowed: 8 [ 449.989446][ T5974] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 449.999033][ T5974] usb 7-1: can't read configurations, error -22 [ 450.006465][ T5974] usb usb7-port1: unable to enumerate USB device [ 450.098534][T14952] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 450.210398][T14961] loop1: detected capacity change from 0 to 4 [ 450.218247][T14961] Dev loop1: unable to read RDB block 4 [ 450.225032][T14961] loop1: unable to read partition table [ 450.230926][T14961] loop1: partition table beyond EOD, truncated [ 450.237652][T14961] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 450.432546][ T5974] usb 3-1: USB disconnect, device number 53 [ 450.543444][ T805] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 450.550704][ T805] ath9k_htc: Failed to initialize the device [ 450.563399][ T5974] usb 3-1: ath9k_htc: USB layer deinitialized [ 450.676627][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.817779][ T5876] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 450.826925][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 450.838728][ T5876] usb 2-1: config 0 descriptor?? [ 450.845630][ T5876] usb 2-1: can't set config #0, error -71 [ 450.854894][ T5876] usb 2-1: USB disconnect, device number 95 [ 450.866228][ T5974] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 451.028169][ T5974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.039116][ T5974] usb 3-1: not running at top speed; connect to a high speed hub [ 451.045142][T14976] loop1: detected capacity change from 0 to 4 [ 451.051064][ T5974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.065119][T14976] Dev loop1: unable to read RDB block 4 [ 451.068414][ T5974] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 451.070786][T14976] loop1: unable to read partition table [ 451.080009][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.088528][T14976] loop1: partition table beyond EOD, truncated [ 451.096466][ T5974] usb 3-1: Product: syz [ 451.102744][T14976] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.123481][ T5974] usb 3-1: Manufacturer: syz [ 451.132826][ T5974] usb 3-1: SerialNumber: syz [ 451.223989][T14978] random: crng reseeded on system resumption [ 451.292384][T14983] netlink: 'syz.8.2839': attribute type 10 has an invalid length. [ 451.389703][ T5974] usb 3-1: interface 3 not found [ 451.406056][ T5974] usb 3-1: USB disconnect, device number 54 [ 451.550079][T14986] openvswitch: netlink: Multiple metadata blocks provided [ 451.556665][T14988] loop1: detected capacity change from 0 to 4 [ 451.558580][T14986] netlink: 'syz.1.2841': attribute type 5 has an invalid length. [ 451.574229][T14986] netlink: 'syz.1.2841': attribute type 9 has an invalid length. [ 451.574283][T13918] Dev loop1: unable to read RDB block 4 [ 451.589322][T13918] loop1: unable to read partition table [ 451.595425][T13918] loop1: partition table beyond EOD, truncated [ 451.607168][T14988] Dev loop1: unable to read RDB block 4 [ 451.614666][T14988] loop1: unable to read partition table [ 451.620807][T14988] loop1: partition table beyond EOD, truncated [ 451.640495][T14988] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.807029][T15000] loop1: detected capacity change from 0 to 4 [ 451.824155][T15000] Dev loop1: unable to read RDB block 4 [ 451.836858][T15000] loop1: unable to read partition table [ 451.847138][T15000] loop1: partition table beyond EOD, truncated [ 451.865075][T15000] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.273565][ T5911] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 452.343341][ T5974] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 452.403575][ T5911] usb 2-1: device descriptor read/64, error -71 [ 452.420555][T15024] loop1: detected capacity change from 0 to 4 [ 452.429967][T15024] Dev loop1: unable to read RDB block 4 [ 452.435885][T15024] loop1: unable to read partition table [ 452.441644][T15024] loop1: partition table beyond EOD, truncated [ 452.447972][T15024] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.505777][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 452.513180][T15027] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2855'. [ 452.524744][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 452.538982][ T30] audit: type=1326 audit(1773611107.233:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15025 comm="syz.8.2855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbffad9c799 code=0x0 [ 452.560768][ T5974] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 452.560794][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.571433][ T5974] usb 3-1: config 0 descriptor?? [ 452.599997][T15011] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 452.628118][ T5974] gspca_main: spca561-2.14.0 probing abcd:cdee [ 452.683495][ T5911] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 452.820530][ T5974] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 452.832465][ T5911] usb 2-1: device descriptor read/64, error -71 [ 452.839427][ T5974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.847075][ T5974] usb 3-1: MIDIStreaming interface descriptor not found [ 452.941354][ T5974] usb 3-1: USB disconnect, device number 55 [ 452.947524][ T5883] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 452.955535][ T5911] usb usb2-port1: attempt power cycle [ 453.124706][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.136825][ T5883] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 453.151739][ T5883] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.161136][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.169865][ T5883] usb 7-1: Product: syz [ 453.174201][ T5883] usb 7-1: Manufacturer: syz [ 453.178808][ T5883] usb 7-1: SerialNumber: syz [ 453.188128][T15031] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 453.323712][ T5911] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 453.364326][ T5911] usb 2-1: device descriptor read/8, error -71 [ 453.398712][T15031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.409605][T15034] loop1: detected capacity change from 0 to 4 [ 453.410277][T15031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.424690][T15034] Dev loop1: unable to read RDB block 4 [ 453.431994][T15034] loop1: unable to read partition table [ 453.435617][ T5883] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 453.438920][T15034] loop1: partition table beyond EOD, truncated [ 453.457401][ T5883] usb 7-1: USB disconnect, device number 118 [ 453.476809][T15034] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.613336][ T5911] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 453.635392][ T5911] usb 2-1: device descriptor read/8, error -71 [ 453.764266][ T5911] usb usb2-port1: unable to enumerate USB device [ 453.953373][ T5883] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 454.054177][ T5832] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 454.104693][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.115076][ T5883] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 454.129828][ T5883] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.138911][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.143444][ T5876] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 454.151008][ T5883] usb 7-1: Product: syz [ 454.162738][ T5883] usb 7-1: Manufacturer: syz [ 454.167696][ T5883] usb 7-1: SerialNumber: syz [ 454.175103][T15031] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 454.236723][ T5832] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 454.245903][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.253949][ T5832] usb 3-1: Product: syz [ 454.258109][ T5832] usb 3-1: Manufacturer: syz [ 454.265375][ T5832] usb 3-1: SerialNumber: syz [ 454.273855][ T5832] usb 3-1: config 0 descriptor?? [ 454.303607][ T5876] usb 9-1: Using ep0 maxpacket: 16 [ 454.310942][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.322646][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.332499][ T5876] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.345330][ T5876] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.354394][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.366113][ T5876] usb 9-1: config 0 descriptor?? [ 454.390363][ T5883] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 454.409849][ T5883] usb 7-1: USB disconnect, device number 119 [ 454.489333][ T5832] usb 3-1: Firmware version (0.0) predates our first public release. [ 454.499376][ T5832] usb 3-1: Please update to version 0.2 or newer [ 454.546323][ T5832] usb 3-1: USB disconnect, device number 56 [ 454.782219][ T5876] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 454.793977][ T5876] microsoft 0003:045E:07DA.001B: no inputs found [ 454.800352][ T5876] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 454.935213][T15056] loop1: detected capacity change from 0 to 4 [ 454.943309][T15056] Dev loop1: unable to read RDB block 4 [ 454.948883][T15056] loop1: unable to read partition table [ 454.955100][T15056] loop1: partition table beyond EOD, truncated [ 454.961300][T15056] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.987097][ T5876] usb 9-1: USB disconnect, device number 44 [ 455.138724][T15060] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.156453][T15060] xfrm0 speed is unknown, defaulting to 1000 [ 455.194216][T15067] loop1: detected capacity change from 0 to 4 [ 455.209037][T15067] Dev loop1: unable to read RDB block 4 [ 455.220727][T15067] loop1: unable to read partition table [ 455.231252][T15067] loop1: partition table beyond EOD, truncated [ 455.243388][T15067] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.513021][T15077] program syz.6.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.608311][T15082] loop1: detected capacity change from 0 to 4 [ 455.624674][T11936] Dev loop1: unable to read RDB block 4 [ 455.636435][T11936] loop1: unable to read partition table [ 455.652490][T11936] loop1: partition table beyond EOD, truncated [ 455.662953][T15082] Dev loop1: unable to read RDB block 4 [ 455.682268][T15082] loop1: unable to read partition table [ 455.689593][T15082] loop1: partition table beyond EOD, truncated [ 455.710310][T15082] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.931770][T15094] loop1: detected capacity change from 0 to 4 [ 455.940449][T15094] Dev loop1: unable to read RDB block 4 [ 455.946391][T15094] loop1: unable to read partition table [ 455.952256][T15094] loop1: partition table beyond EOD, truncated [ 455.959275][T15094] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 456.188694][T15099] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2878'. [ 456.263494][ T6352] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 456.443510][ T6352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.474230][ T6352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.499035][ T6352] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 456.508400][ T6352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.522698][ T6352] usb 2-1: config 0 descriptor?? [ 456.546320][ T5832] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 456.706612][ T5832] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 456.730310][ T5832] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 456.740271][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 456.754352][ T5832] usb 3-1: Product: syz [ 456.763446][ T5832] usb 3-1: Manufacturer: syz [ 456.773334][ T5832] usb 3-1: SerialNumber: syz [ 456.787756][ T5832] usb 3-1: config 0 descriptor?? [ 456.824322][T15120] loop1: detected capacity change from 0 to 4 [ 456.831562][T15120] Dev loop1: unable to read RDB block 4 [ 456.837474][T15120] loop1: unable to read partition table [ 456.843528][T15120] loop1: partition table beyond EOD, truncated [ 456.845812][ T5883] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 456.849785][T15120] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 456.926859][T15122] loop1: detected capacity change from 0 to 4 [ 456.938141][T13918] Dev loop1: unable to read RDB block 4 [ 456.947448][T13918] loop1: unable to read partition table [ 456.954947][ T6352] usbhid 2-1:0.0: can't add hid device: -71 [ 456.962739][T13918] loop1: partition table beyond EOD, truncated [ 456.969596][ T6352] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 456.982486][T15122] Dev loop1: unable to read RDB block 4 [ 456.985416][ T6352] usb 2-1: USB disconnect, device number 100 [ 456.989190][T15122] loop1: unable to read partition table [ 457.000635][T15122] loop1: partition table beyond EOD, truncated [ 457.008689][T15122] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 457.018284][ T5876] usb 3-1: USB disconnect, device number 57 [ 457.035522][ T5883] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 457.049017][ T5883] usb 7-1: config 0 has no interface number 0 [ 457.057930][ T5883] usb 7-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 457.069945][ T5883] usb 7-1: config 0 interface 11 altsetting 245 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 457.082965][ T5883] usb 7-1: config 0 interface 11 altsetting 245 endpoint 0x87 has invalid wMaxPacketSize 0 [ 457.108177][ T5883] usb 7-1: config 0 interface 11 has no altsetting 0 [ 457.115129][ T5883] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 457.124227][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.159048][ T5883] usb 7-1: config 0 descriptor?? [ 457.169133][ T5883] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected [ 457.185356][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81 [ 457.193606][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82 [ 457.201436][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1 [ 457.209358][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2 [ 457.217976][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85 [ 457.226051][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5 [ 457.241469][ T5883] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 457.268268][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83 [ 457.276305][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84 [ 457.286346][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3 [ 457.296143][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4 [ 457.305036][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 86 [ 457.321732][ T5883] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6 [ 457.337706][ T5883] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 457.368593][ T5876] usb 7-1: USB disconnect, device number 120 [ 457.391002][ T5876] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 457.409385][ T5876] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 457.420653][ T5876] keyspan 7-1:0.11: device disconnected [ 457.911318][T15145] loop1: detected capacity change from 0 to 4 [ 457.933157][T13918] Dev loop1: unable to read RDB block 4 [ 457.941476][T13918] loop1: unable to read partition table [ 457.952556][T13918] loop1: partition table beyond EOD, truncated [ 457.960726][T15145] Dev loop1: unable to read RDB block 4 [ 457.969078][T15145] loop1: unable to read partition table [ 457.975183][T15145] loop1: partition table beyond EOD, truncated [ 457.981541][T15145] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.004556][ T6352] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 458.178617][ T6352] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 458.188185][ T6352] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 458.196462][ T6352] usb 3-1: Product: syz [ 458.200742][ T6352] usb 3-1: Manufacturer: syz [ 458.205452][ T6352] usb 3-1: SerialNumber: syz [ 458.212874][ T6352] usb 3-1: config 0 descriptor?? [ 458.373356][ T5876] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 458.374314][ T5883] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 458.423100][ T5911] usb 3-1: USB disconnect, device number 58 [ 458.533318][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 458.540141][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 458.549053][ T5883] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 458.554930][ T5876] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.557312][ T5883] usb 2-1: config 0 has no interface number 0 [ 458.569127][ T5876] usb 7-1: config 0 has no interface number 0 [ 458.575076][ T5883] usb 2-1: config 0 interface 58 has no altsetting 0 [ 458.581700][ T5876] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 458.588341][ T5883] usb 2-1: New USB device found, idVendor=056e, idProduct=4002, bcdDevice=98.ec [ 458.604023][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.607781][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.620259][ T5883] usb 2-1: Product: syz [ 458.624531][ T5876] usb 7-1: Product: syz [ 458.625324][ T5883] usb 2-1: Manufacturer: syz [ 458.628943][ T5876] usb 7-1: Manufacturer: syz [ 458.635336][ T5883] usb 2-1: SerialNumber: syz [ 458.640156][ T5876] usb 7-1: SerialNumber: syz [ 458.648679][ T5883] usb 2-1: config 0 descriptor?? [ 458.650325][ T5876] usb 7-1: config 0 descriptor?? [ 458.657511][ T5883] pegasus 2-1:0.58: Missing or invalid endpoints [ 458.916317][T15162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.928765][T15162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.223321][ T5883] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 459.374989][ T5883] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 459.387046][ T5883] usb 3-1: config 0 has no interface number 0 [ 459.399030][ T5883] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 459.409786][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.424176][ T5883] usb 3-1: Product: syz [ 459.431645][ T5883] usb 3-1: Manufacturer: syz [ 459.431800][ T5876] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 459.442723][ T5883] usb 3-1: SerialNumber: syz [ 459.470060][ T5883] usb 3-1: config 0 descriptor?? [ 459.479067][ T5876] usb 7-1: USB disconnect, device number 121 [ 459.691952][ T5883] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 459.701474][ T5883] gspca_m5602: Failed to find a sensor [ 459.710693][ T5883] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 459.721384][ T5883] usb 3-1: USB disconnect, device number 59 [ 459.778905][T15176] loop1: detected capacity change from 0 to 4 [ 459.786455][T15176] Dev loop1: unable to read RDB block 4 [ 459.794841][T15176] loop1: unable to read partition table [ 459.800636][T15176] loop1: partition table beyond EOD, truncated [ 459.807452][T15176] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 459.883705][T15178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.899443][T15178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.986437][T15181] loop1: detected capacity change from 0 to 4 [ 459.995210][T15181] Dev loop1: unable to read RDB block 4 [ 460.001579][T15181] loop1: unable to read partition table [ 460.010075][T15181] loop1: partition table beyond EOD, truncated [ 460.016973][T15181] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.076066][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.076066][T15184] Use struct sctp_sack_info instead [ 460.099102][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.099102][T15184] Use struct sctp_sack_info instead [ 460.117264][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.117264][T15184] Use struct sctp_sack_info instead [ 460.134415][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.134415][T15184] Use struct sctp_sack_info instead [ 460.152369][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.152369][T15184] Use struct sctp_sack_info instead [ 460.170012][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.170012][T15184] Use struct sctp_sack_info instead [ 460.189410][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.189410][T15184] Use struct sctp_sack_info instead [ 460.217149][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.217149][T15184] Use struct sctp_sack_info instead [ 460.234804][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.234804][T15184] Use struct sctp_sack_info instead [ 460.252111][T15184] sctp: [Deprecated]: syz.6.2906 (pid 15184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.252111][T15184] Use struct sctp_sack_info instead [ 460.633774][ T5876] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 460.785313][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 460.800533][ T5876] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 460.804216][T15202] loop1: detected capacity change from 0 to 4 [ 460.809300][ T5876] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 460.822838][T13918] Dev loop1: unable to read RDB block 4 [ 460.826867][ T5876] usb 7-1: config 63 has no interface number 0 [ 460.834643][T13918] loop1: unable to read partition table [ 460.837726][ T5876] usb 7-1: config 63 interface 66 has no altsetting 0 [ 460.843872][T13918] loop1: partition table beyond EOD, truncated [ 460.852785][ T5876] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 460.868911][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.877196][ T5876] usb 7-1: Product: syz [ 460.878568][T15202] Dev loop1: unable to read RDB block 4 [ 460.881431][ T5876] usb 7-1: Manufacturer: syz [ 460.887509][T15202] loop1: unable to read partition table [ 460.891687][ T5876] usb 7-1: SerialNumber: syz [ 460.897884][T15202] loop1: partition table beyond EOD, truncated [ 460.920287][T15202] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.047969][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 461.115046][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.116087][T15209] loop1: detected capacity change from 0 to 4 [ 461.131814][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.148705][ T5876] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 461.159645][T15209] Dev loop1: unable to read RDB block 4 [ 461.165467][ T5876] uvcvideo 7-1:63.66: No valid video chain found. [ 461.168859][ T5911] usb 2-1: USB disconnect, device number 101 [ 461.172110][T15209] loop1: unable to read partition table [ 461.187539][T15209] loop1: partition table beyond EOD, truncated [ 461.195464][T15209] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.234179][ T5876] usb 7-1: USB disconnect, device number 122 [ 461.563353][ T5883] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 461.593374][ T5911] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 461.713362][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 461.719808][ T5883] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 461.728264][ T5883] usb 3-1: config 139 has too many interfaces: 37, using maximum allowed: 32 [ 461.739157][ T5883] usb 3-1: config 139 has 1 interface, different from the descriptor's value: 37 [ 461.748640][ T5883] usb 3-1: config 139 has no interface number 0 [ 461.755552][ T5883] usb 3-1: config 139 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.767592][ T5883] usb 3-1: config 139 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 461.785788][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 461.794902][ T5883] usb 3-1: config 139 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.806379][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.818433][ T5883] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 461.838592][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 461.839420][ T5911] usb 2-1: config 0 descriptor?? [ 461.853022][ T5883] usb 3-1: Product: syz [ 461.882186][T15213] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 461.882855][ T5911] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 461.935453][ T5832] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 462.106969][ T5832] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 462.129960][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.174773][ T5832] usb 7-1: selecting invalid altsetting 3 [ 462.181479][ T5832] comedi comedi4: could not set alternate setting 3 in high speed [ 462.190277][ T5832] usbduxsigma 7-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 462.205292][ T5832] usbduxsigma 7-1:128.0: probe with driver usbduxsigma failed with error -22 [ 462.313321][ T5883] usb 3-1: USB disconnect, device number 60 [ 462.346710][T15215] input: syz1 as /devices/virtual/input/input51 [ 462.389112][T14789] usb 7-1: USB disconnect, device number 123 [ 462.404073][ T5832] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 462.563343][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 462.570113][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 462.581934][ T5832] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 462.591037][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.599133][ T5832] usb 9-1: Product: syz [ 462.605310][ T5832] usb 9-1: Manufacturer: syz [ 462.609922][ T5832] usb 9-1: SerialNumber: syz [ 462.618856][ T5832] usb 9-1: config 0 descriptor?? [ 462.634747][ T5832] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 462.872837][ T5911] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 463.126736][T15230] loop1: detected capacity change from 0 to 4 [ 463.149681][T15230] Dev loop1: unable to read RDB block 4 [ 463.171907][T15230] loop1: unable to read partition table [ 463.183052][T15230] loop1: partition table beyond EOD, truncated [ 463.212990][T15230] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.519276][T15236] program syz.6.2923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.602564][ T5883] usb 9-1: USB disconnect, device number 45 [ 463.608844][ T3537] usb 9-1: Failed to submit usb control message: -71 [ 463.634003][ T3537] usb 9-1: unable to send the bmi data to the device: -71 [ 463.642891][ T3537] usb 9-1: unable to get target info from device [ 463.652590][ T3537] usb 9-1: could not get target info (-71) [ 463.662833][ T3537] usb 9-1: could not probe fw (-71) [ 463.714252][T15239] loop1: detected capacity change from 0 to 4 [ 463.721784][T15239] Dev loop1: unable to read RDB block 4 [ 463.729203][T15239] loop1: unable to read partition table [ 463.736451][T15239] loop1: partition table beyond EOD, truncated [ 463.742735][T15239] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 464.053325][ T5876] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 464.224945][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 464.247315][ T5876] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 464.260482][ T5876] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 464.272721][ T5876] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.283922][ T5876] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 464.303791][ T5876] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 464.313259][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.322572][ T5876] usb 3-1: Product: syz [ 464.327962][ T5876] usb 3-1: Manufacturer: syz [ 464.332628][ T5876] usb 3-1: SerialNumber: syz [ 464.348767][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 464.361541][ T5876] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input52 [ 464.548287][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.557165][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.583307][ T5876] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 464.591592][ T5876] (id 0x00) [ 464.665516][ T5876] rc_core: IR keymap rc-imon-pad not found [ 464.671385][ T5876] Registered IR keymap rc-empty [ 464.676427][ T5876] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 464.686981][ T5876] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 464.705180][ T5883] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 464.784494][ T5876] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 464.797184][ T5876] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input53 [ 464.817355][ T5876] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:61> initialized [ 464.863638][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 464.876770][ T5883] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 464.885184][ T5883] usb 7-1: config 0 has no interface number 0 [ 464.891380][ T5883] usb 7-1: config 0 interface 12 has no altsetting 0 [ 464.902928][ T5883] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 464.916988][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.926993][ T5883] usb 7-1: Product: syz [ 464.931317][ T5883] usb 7-1: Manufacturer: syz [ 464.938880][ T5883] usb 7-1: SerialNumber: syz [ 464.947523][ T5883] usb 7-1: config 0 descriptor?? [ 465.101073][T15261] loop1: detected capacity change from 0 to 4 [ 465.108627][T15261] Dev loop1: unable to read RDB block 4 [ 465.117001][T15261] loop1: unable to read partition table [ 465.122884][T15261] loop1: partition table beyond EOD, truncated [ 465.129588][T15261] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 465.162816][ T5883] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 465.190809][ T5883] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 465.214116][ T5883] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 465.225912][ T5883] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 465.264695][ T5883] usb 7-1: USB disconnect, device number 124 [ 465.274957][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2932'. [ 465.351918][T15268] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.360252][T15268] xfrm0 speed is unknown, defaulting to 1000 [ 465.382653][T15211] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2915'. [ 465.405410][ T5911] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 465.418941][ T5911] usb 2-1: USB disconnect, device number 102 [ 465.619540][T15271] loop1: detected capacity change from 0 to 4 [ 465.632528][T15271] Dev loop1: unable to read RDB block 4 [ 465.639834][T15271] loop1: unable to read partition table [ 465.646038][T15271] loop1: partition table beyond EOD, truncated [ 465.652408][T15271] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.039093][T15280] binder: 15279:15280 ioctl c00c620f 200000000140 returned -22 [ 466.286309][T15295] loop1: detected capacity change from 0 to 4 [ 466.310383][T15295] Dev loop1: unable to read RDB block 4 [ 466.324046][T15295] loop1: unable to read partition table [ 466.331997][T15295] loop1: partition table beyond EOD, truncated [ 466.339372][T15295] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.458728][T15305] overlayfs: missing 'lowerdir' [ 466.537157][T15311] openvswitch: netlink: Invalid VLAN frame [ 466.633369][ T5911] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 466.743345][T14789] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 466.793317][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 466.799703][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2951'. [ 466.800513][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.818502][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0 [ 466.826789][ T5875] usb 3-1: USB disconnect, device number 61 [ 466.830055][ T5911] usb 2-1: string descriptor 0 read error: -22 [ 466.849122][ T5911] usb 2-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.40 [ 466.870915][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.904941][T14789] usb 7-1: Using ep0 maxpacket: 32 [ 466.916011][T14789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.931410][T14789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.954286][T14789] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 466.981560][T14789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.004976][T14789] usb 7-1: config 0 descriptor?? [ 467.017261][T15327] loop1: detected capacity change from 0 to 4 [ 467.038552][T15327] Dev loop1: unable to read RDB block 4 [ 467.047317][T15327] loop1: unable to read partition table [ 467.063490][T15327] loop1: partition table beyond EOD, truncated [ 467.071884][T15327] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 467.211374][T15331] loop1: detected capacity change from 0 to 4 [ 467.224915][T15331] Dev loop1: unable to read RDB block 4 [ 467.231716][T15331] loop1: unable to read partition table [ 467.241809][T15331] loop1: partition table beyond EOD, truncated [ 467.248306][T15331] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 467.332363][T15334] netlink: 'syz.8.2956': attribute type 21 has an invalid length. [ 467.342792][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2956'. [ 467.357968][ T5911] usbhid 2-1:1.0: can't add hid device: -32 [ 467.369255][T15301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.384113][ T5911] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 467.397035][T15301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.453014][T14789] koneplus 0003:1E7D:2D51.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 467.631430][ T5832] usb 2-1: USB disconnect, device number 103 [ 467.859498][T15308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.873776][T15308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.884965][T15356] loop1: detected capacity change from 0 to 4 [ 467.886011][T14789] usb 7-1: USB disconnect, device number 125 [ 467.908644][T15356] Dev loop1: unable to read RDB block 4 [ 467.938822][T15356] loop1: unable to read partition table [ 467.945167][T15356] loop1: partition table beyond EOD, truncated [ 467.955432][T15356] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.102807][T15366] loop1: detected capacity change from 0 to 4 [ 468.110765][T13918] Dev loop1: unable to read RDB block 4 [ 468.119585][T13918] loop1: unable to read partition table [ 468.125530][T13918] loop1: partition table beyond EOD, truncated [ 468.133718][T15366] Dev loop1: unable to read RDB block 4 [ 468.139377][T15366] loop1: unable to read partition table [ 468.145625][T15366] loop1: partition table beyond EOD, truncated [ 468.151853][T15366] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.431531][T15375] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 468.439900][T15374] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 468.493845][T14789] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 468.535724][ T5875] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 468.645282][T14789] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 468.653503][T14789] usb 3-1: config 0 has no interface number 0 [ 468.659663][T14789] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 468.671298][T14789] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.683193][T14789] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 468.683436][ T5875] usb 2-1: device descriptor read/64, error -71 [ 468.692545][T14789] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 468.709459][T14789] usb 3-1: Product: syz [ 468.713888][T14789] usb 3-1: SerialNumber: syz [ 468.721100][T14789] usb 3-1: config 0 descriptor?? [ 468.729961][T14789] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 468.738541][T14789] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input55 [ 468.793798][ T6352] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 468.943434][ T5875] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 468.978750][ T6352] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 468.990060][ T6352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.004933][ T6352] usb 7-1: Product: syz [ 469.009218][ T6352] usb 7-1: Manufacturer: syz [ 469.014901][ T6352] usb 7-1: SerialNumber: syz [ 469.029640][ T6352] usb 7-1: config 0 descriptor?? [ 469.084430][ T5875] usb 2-1: device descriptor read/64, error -71 [ 469.137311][T15370] syz.2.2967 (15370): drop_caches: 2 [ 469.158780][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.159053][ T5832] usb 3-1: USB disconnect, device number 62 [ 469.166008][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 469.191161][ T5832] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 469.216543][ T5875] usb usb2-port1: attempt power cycle [ 469.253113][T15387] loop1: detected capacity change from 0 to 4 [ 469.260314][T15387] Dev loop1: unable to read RDB block 4 [ 469.271483][T15387] loop1: unable to read partition table [ 469.280881][T15387] loop1: partition table beyond EOD, truncated [ 469.288352][T15387] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.521504][T15396] loop1: detected capacity change from 0 to 4 [ 469.529214][T11936] Dev loop1: unable to read RDB block 4 [ 469.535224][T11936] loop1: unable to read partition table [ 469.541040][T11936] loop1: partition table beyond EOD, truncated [ 469.551801][T15396] Dev loop1: unable to read RDB block 4 [ 469.557538][T15396] loop1: unable to read partition table [ 469.563468][ T5875] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 469.571483][T15396] loop1: partition table beyond EOD, truncated [ 469.578760][T15396] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.603991][ T5875] usb 2-1: device descriptor read/8, error -71 [ 469.633364][T14789] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 469.793311][T14789] usb 3-1: Using ep0 maxpacket: 8 [ 469.799953][T14789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.812190][T14789] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 469.821924][T14789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.836468][T14789] usb 3-1: Product: syz [ 469.845762][T14789] usb 3-1: Manufacturer: syz [ 469.854643][ T5875] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 469.854650][T14789] usb 3-1: SerialNumber: syz [ 469.874598][ T5875] usb 2-1: device descriptor read/8, error -71 [ 469.883970][T14789] usb 3-1: config 0 descriptor?? [ 469.898645][T14789] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 469.981498][T15408] syzkaller1: entered promiscuous mode [ 469.991522][T15408] syzkaller1: entered allmulticast mode [ 469.997983][ T5875] usb usb2-port1: unable to enumerate USB device [ 470.051440][ T6352] usb 7-1: Firmware version (0.0) predates our first public release. [ 470.059813][ T6352] usb 7-1: Please update to version 0.2 or newer [ 470.100297][ T6352] usb 7-1: USB disconnect, device number 126 [ 470.112423][T14789] usb 3-1: USB disconnect, device number 63 [ 470.366758][T15415] loop1: detected capacity change from 0 to 4 [ 470.376453][T15415] Dev loop1: unable to read RDB block 4 [ 470.382104][T15415] loop1: unable to read partition table [ 470.388467][T15415] loop1: partition table beyond EOD, truncated [ 470.394765][T15415] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.619024][T15422] loop1: detected capacity change from 0 to 4 [ 470.628472][T13918] Dev loop1: unable to read RDB block 4 [ 470.636095][T13918] loop1: unable to read partition table [ 470.641955][T13918] loop1: partition table beyond EOD, truncated [ 470.650170][T15422] Dev loop1: unable to read RDB block 4 [ 470.656336][T15422] loop1: unable to read partition table [ 470.662157][T15422] loop1: partition table beyond EOD, truncated [ 470.669379][T15422] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.693602][T14789] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 470.794086][T15426] pimreg: entered allmulticast mode [ 470.857364][T15430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.859596][T14789] usb 9-1: Using ep0 maxpacket: 32 [ 470.874040][T14789] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 470.882385][T14789] usb 9-1: config 0 has no interface number 0 [ 470.891807][T14789] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 470.914903][T14789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.930047][T14789] usb 9-1: Product: syz [ 470.934283][T14789] usb 9-1: Manufacturer: syz [ 470.938966][T14789] usb 9-1: SerialNumber: syz [ 470.947687][T14789] usb 9-1: config 0 descriptor?? [ 470.961481][T14789] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 471.004730][T15434] loop1: detected capacity change from 0 to 4 [ 471.011646][T15434] Dev loop1: unable to read RDB block 4 [ 471.019346][T15434] loop1: unable to read partition table [ 471.025928][T15434] loop1: partition table beyond EOD, truncated [ 471.032121][T15434] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.054148][ T5883] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 471.163719][T14789] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 471.178621][T14789] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 471.223384][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 471.231167][ T5883] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 471.240824][ T5883] usb 7-1: config 0 has no interface number 0 [ 471.251801][ T5883] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 471.265957][ T5883] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 471.278353][ T5883] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 471.290627][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.298676][ T5883] usb 7-1: Product: syz [ 471.302864][ T5883] usb 7-1: Manufacturer: syz [ 471.307526][ T5883] usb 7-1: SerialNumber: syz [ 471.317956][ T5883] usb 7-1: config 0 descriptor?? [ 471.327285][T15428] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 471.337820][T15428] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 471.432480][T15441] loop1: detected capacity change from 0 to 4 [ 471.440496][T15441] Dev loop1: unable to read RDB block 4 [ 471.446351][T15441] loop1: unable to read partition table [ 471.452225][T15441] loop1: partition table beyond EOD, truncated [ 471.458463][T15441] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.545573][T15443] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 471.555964][T15428] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 471.566767][T15428] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 471.591482][T15445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 471.706264][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 471.714397][ T5911] usb 9-1: USB disconnect, device number 46 [ 471.727172][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 471.745950][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 471.759999][ T5911] quatech2 9-1:0.51: device disconnected [ 471.784597][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.793575][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.815424][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.826238][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.837235][T15428] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.886663][ T5883] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 471.897619][T14789] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 471.906314][ T5883] asix 7-1:0.34: probe with driver asix failed with error -71 [ 471.918154][ T5883] usb 7-1: USB disconnect, device number 127 [ 472.063356][T14789] usb 2-1: Using ep0 maxpacket: 16 [ 472.075517][T14789] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 472.088649][T14789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.102132][T14789] usb 2-1: Product: syz [ 472.106752][T14789] usb 2-1: Manufacturer: syz [ 472.111475][T14789] usb 2-1: SerialNumber: syz [ 472.120811][T14789] r8152-cfgselector 2-1: Unknown version 0x0000 [ 472.127664][T14789] r8152-cfgselector 2-1: config 0 descriptor?? [ 472.317568][T15462] loop1: detected capacity change from 0 to 4 [ 472.325791][T15462] Dev loop1: unable to read RDB block 4 [ 472.331499][T15462] loop1: unable to read partition table [ 472.337640][ T5875] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 472.343774][T15462] loop1: partition table beyond EOD, truncated [ 472.353462][T15462] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 472.435691][ T7732] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 472.533538][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 472.540441][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.546023][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.557287][ T5875] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 472.567521][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.569896][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.591051][ T5875] usb 3-1: config 0 descriptor?? [ 472.612503][T14789] r8152-cfgselector 2-1: USB disconnect, device number 108 [ 472.666329][T15472] loop1: detected capacity change from 0 to 4 [ 472.674294][T15472] Dev loop1: unable to read RDB block 4 [ 472.679988][T15472] loop1: unable to read partition table [ 472.686226][T15472] loop1: partition table beyond EOD, truncated [ 472.693108][T15472] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 472.713449][ T805] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 472.853372][ T805] usb 7-1: device descriptor read/64, error -71 [ 473.078829][ T5875] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 473.104980][ T805] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 473.134677][ T5832] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 473.135053][T15483] virt_wifi0 speed is unknown, defaulting to 1000 [ 473.150993][T15483] xfrm0 speed is unknown, defaulting to 1000 [ 473.253808][ T805] usb 7-1: device descriptor read/64, error -71 [ 473.303312][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 473.319261][ T5832] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.328766][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.337610][ T5832] usb 2-1: Product: syz [ 473.342063][ T5832] usb 2-1: Manufacturer: syz [ 473.348949][ T5832] usb 2-1: SerialNumber: syz [ 473.362137][ T5832] usb 2-1: config 0 descriptor?? [ 473.368684][ T805] usb usb7-port1: attempt power cycle [ 473.588382][T15490] loop1: detected capacity change from 0 to 4 [ 473.589321][ T5832] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 473.604762][T15490] Dev loop1: unable to read RDB block 4 [ 473.623367][T15490] loop1: unable to read partition table [ 473.639727][T15490] loop1: partition table beyond EOD, truncated [ 473.652471][T15490] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.723343][ T805] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 473.754384][ T805] usb 7-1: device descriptor read/8, error -71 [ 473.768201][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3009'. [ 474.013491][ T805] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 474.044473][ T805] usb 7-1: device descriptor read/8, error -71 [ 474.163593][ T805] usb usb7-port1: unable to enumerate USB device [ 474.173423][ T5911] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 474.325176][ T5911] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 474.336285][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.346992][ T5911] usb 9-1: config 0 descriptor?? [ 474.354530][ T5911] cp210x 9-1:0.0: cp210x converter detected [ 474.765518][ T5911] usb 9-1: cp210x converter now attached to ttyUSB0 [ 474.960668][ T805] usb 9-1: USB disconnect, device number 47 [ 474.972359][ T805] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 474.986393][ T805] cp210x 9-1:0.0: device disconnected [ 475.153109][T14789] usb 3-1: USB disconnect, device number 64 [ 475.249510][T15501] loop1: detected capacity change from 0 to 4 [ 475.259338][T15501] Dev loop1: unable to read RDB block 4 [ 475.267071][T15501] loop1: unable to read partition table [ 475.273068][T15501] loop1: partition table beyond EOD, truncated [ 475.280960][T15501] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.581813][T15507] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.592222][T15507] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 475.602086][T15507] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.612377][T15507] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 475.689267][T15512] kAFS: unparsable volume name [ 475.748379][T15517] loop1: detected capacity change from 0 to 4 [ 475.760492][T15517] Dev loop1: unable to read RDB block 4 [ 475.768272][T15517] loop1: unable to read partition table [ 475.775351][T15512] netlink: 'syz.6.3016': attribute type 21 has an invalid length. [ 475.783572][T15517] loop1: partition table beyond EOD, truncated [ 475.789977][T15512] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3016'. [ 475.793488][T15517] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.813373][T14789] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 475.905667][ T5832] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 475.984065][T14789] usb 9-1: Using ep0 maxpacket: 32 [ 475.990573][T14789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 476.002286][T14789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 476.015453][T14789] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 476.024668][T14789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.032675][T14789] usb 9-1: Product: syz [ 476.037600][T14789] usb 9-1: Manufacturer: syz [ 476.042197][T14789] usb 9-1: SerialNumber: syz [ 476.049081][T14789] usb 9-1: config 0 descriptor?? [ 476.059924][T14789] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 476.073412][ T5911] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 476.108659][T14789] usb 2-1: USB disconnect, device number 109 [ 476.160841][T15528] loop1: detected capacity change from 0 to 4 [ 476.168677][T15528] Dev loop1: unable to read RDB block 4 [ 476.176442][T15528] loop1: unable to read partition table [ 476.182304][T15528] loop1: partition table beyond EOD, truncated [ 476.188682][T15528] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 476.195062][ T5832] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 476.203491][ T5911] usb 7-1: device descriptor read/64, error -71 [ 476.265023][ T5883] usb 9-1: USB disconnect, device number 48 [ 476.278429][ T3537] usb 9-1: Failed to submit usb control message: -71 [ 476.287966][ T3537] usb 9-1: unable to send the bmi data to the device: -71 [ 476.295328][ T3537] usb 9-1: unable to get target info from device [ 476.302385][ T3537] usb 9-1: could not get target info (-71) [ 476.309058][ T3537] usb 9-1: could not probe fw (-71) [ 476.376112][ T5832] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 476.385684][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.395931][ T5832] usb 3-1: config 0 has no interface number 0 [ 476.402362][ T5832] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 476.412428][ T5832] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.427416][ T5832] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 476.436574][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.445582][ T5911] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 476.445727][ T5832] usb 3-1: Product: syz [ 476.457503][ T5832] usb 3-1: Manufacturer: syz [ 476.462121][ T5832] usb 3-1: SerialNumber: syz [ 476.472006][ T7732] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 476.483634][ T7732] Bluetooth: hci5: Injecting HCI hardware error event [ 476.492470][ T7732] Bluetooth: hci5: hardware error 0x00 [ 476.517630][ T5832] usb 3-1: config 0 descriptor?? [ 476.583446][T14789] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 476.593545][ T5911] usb 7-1: device descriptor read/64, error -71 [ 476.703816][ T5911] usb usb7-port1: attempt power cycle [ 476.726838][ T5832] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 476.736160][T14789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 476.736192][T14789] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 476.736216][T14789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 5632, setting to 1024 [ 476.736240][T14789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 476.738465][T14789] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 476.754650][ T5832] usb 3-1: USB disconnect, device number 65 [ 476.791046][T14789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.809996][T14789] usb 2-1: Product: syz [ 476.837548][T14789] usb 2-1: Manufacturer: syz [ 476.842225][T14789] usb 2-1: SerialNumber: syz [ 476.857158][T14789] usb 2-1: config 0 descriptor?? [ 476.863208][T15530] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 476.871080][T15530] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 476.886121][T14789] usb 2-1: ucan: probing device on interface #0 [ 477.043370][ T5911] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 477.074029][ T5911] usb 7-1: device descriptor read/8, error -71 [ 477.088609][T15536] netlink: 'syz.8.3024': attribute type 10 has an invalid length. [ 477.092605][T14789] usb 2-1: ucan: could not read protocol version, ret=-71 [ 477.112926][T14789] usb 2-1: ucan: probe failed; try to update the device firmware [ 477.135619][T14789] usb 2-1: USB disconnect, device number 110 [ 477.140439][T15536] sp0: Synchronizing with TNC [ 477.313643][ T5911] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 477.331206][T15542] loop1: detected capacity change from 0 to 4 [ 477.338476][T15542] Dev loop1: unable to read RDB block 4 [ 477.346114][T15542] loop1: unable to read partition table [ 477.352194][ T5911] usb 7-1: device descriptor read/8, error -71 [ 477.358655][T15542] loop1: partition table beyond EOD, truncated [ 477.365696][T15542] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 477.474029][ T5911] usb usb7-port1: unable to enumerate USB device [ 477.493403][T14789] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 477.664189][T14789] usb 9-1: Using ep0 maxpacket: 16 [ 477.673115][T14789] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.687089][ T5911] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 477.695467][T14789] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.706635][T14789] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.718180][T14789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.873326][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 477.881123][ T5911] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 477.889622][ T5911] usb 3-1: config 0 has no interface number 0 [ 477.897696][ T5911] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 477.906820][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.917085][ T5911] usb 3-1: Product: syz [ 477.921339][ T5911] usb 3-1: Manufacturer: syz [ 477.926218][ T5911] usb 3-1: SerialNumber: syz [ 477.933091][ T5911] usb 3-1: config 0 descriptor?? [ 477.943943][T14789] usbhid 9-1:128.0: can't add hid device: -71 [ 477.950465][T14789] usbhid 9-1:128.0: probe with driver usbhid failed with error -71 [ 477.965104][T14789] usb 9-1: USB disconnect, device number 49 [ 478.482878][T15552] loop1: detected capacity change from 0 to 4 [ 478.490380][T15552] Dev loop1: unable to read RDB block 4 [ 478.496417][T15552] loop1: unable to read partition table [ 478.514274][T15552] loop1: partition table beyond EOD, truncated [ 478.521171][T15552] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.547614][ T7732] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 478.820852][ T5911] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 478.837445][T15563] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.3034'. [ 478.848804][ T5911] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 478.860286][ T5911] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 478.874198][ T5911] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 478.886218][ T5911] usb 3-1: USB disconnect, device number 66 [ 478.983397][T14789] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 479.133310][T14789] usb 2-1: Using ep0 maxpacket: 32 [ 479.139887][T14789] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 479.149991][T14789] usb 2-1: config 0 has no interface number 0 [ 479.156150][T14789] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.166088][T14789] usb 2-1: config 0 interface 89 has no altsetting 0 [ 479.175833][T14789] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 479.185122][T14789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.193154][T14789] usb 2-1: Product: syz [ 479.197396][T14789] usb 2-1: Manufacturer: syz [ 479.202012][T14789] usb 2-1: SerialNumber: syz [ 479.208615][T14789] usb 2-1: config 0 descriptor?? [ 479.216662][T14789] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 479.226269][T14789] em28xx 2-1:0.89: Video interface 89 found: [ 479.449536][T15570] loop1: detected capacity change from 0 to 4 [ 479.457651][T15570] Dev loop1: unable to read RDB block 4 [ 479.464212][T15570] loop1: unable to read partition table [ 479.470056][T15570] loop1: partition table beyond EOD, truncated [ 479.477269][T15570] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.740989][T15581] loop1: detected capacity change from 0 to 4 [ 479.751573][T15581] Dev loop1: unable to read RDB block 4 [ 479.758901][T15581] loop1: unable to read partition table [ 479.767044][T15581] loop1: partition table beyond EOD, truncated [ 479.773345][T15581] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.835730][T14789] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 480.137482][ T5832] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 480.307666][T15597] loop1: detected capacity change from 0 to 4 [ 480.317085][T15597] Dev loop1: unable to read RDB block 4 [ 480.322793][T15597] loop1: unable to read partition table [ 480.329074][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 480.342270][T15597] loop1: partition table beyond EOD, truncated [ 480.348544][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 480.360095][T15597] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.369515][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 480.382583][ T5832] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 480.394892][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.402915][ T5832] usb 3-1: Product: syz [ 480.415659][ T5832] usb 3-1: Manufacturer: syz [ 480.420380][ T5832] usb 3-1: SerialNumber: syz [ 480.433634][ T5832] usb 3-1: config 0 descriptor?? [ 480.445922][T15583] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 480.454426][T15583] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 480.462839][ T5832] usb 3-1: ucan: probing device on interface #0 [ 480.478366][T14789] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 480.487923][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3047'. [ 480.500770][T14789] em28xx 2-1:0.89: board has no eeprom [ 480.563343][T14789] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 480.570621][T14789] em28xx 2-1:0.89: analog set to bulk mode. [ 480.579918][ T5911] em28xx 2-1:0.89: Registering V4L2 extension [ 480.595377][T14789] usb 2-1: USB disconnect, device number 111 [ 480.616854][T14789] em28xx 2-1:0.89: Disconnecting em28xx [ 480.627802][ T5911] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 480.635064][ T5911] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 480.642487][ T5911] em28xx 2-1:0.89: No AC97 audio processor [ 480.656400][ T5911] usb 2-1: Decoder not found [ 480.661090][ T5911] em28xx 2-1:0.89: failed to create media graph [ 480.667636][ T5911] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 480.669161][ T5832] usb 3-1: ucan: could not read protocol version, ret=26 [ 480.684869][ T5832] usb 3-1: ucan: probe failed; try to update the device firmware [ 480.693151][ T5911] em28xx 2-1:0.89: Registering snapshot button... [ 480.708002][ T5911] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input57 [ 480.721200][ T5911] em28xx 2-1:0.89: Remote control support is not available for this card. [ 480.730295][T14789] em28xx 2-1:0.89: Closing input extension [ 480.738624][T14789] em28xx 2-1:0.89: Deregistering snapshot button [ 480.751963][T14789] em28xx 2-1:0.89: Freeing device [ 481.051751][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 481.155128][T15615] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3051'. [ 481.167239][T15616] loop1: detected capacity change from 0 to 4 [ 481.176772][T15616] Dev loop1: unable to read RDB block 4 [ 481.182442][T15616] loop1: unable to read partition table [ 481.192154][T15616] loop1: partition table beyond EOD, truncated [ 481.199572][T15616] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 481.258003][T15618] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3052'. [ 481.313410][ T5911] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 481.381840][T15627] binder: 15626:15627 ioctl c0045003 200000000080 returned -22 [ 481.432142][T15629] loop1: detected capacity change from 0 to 4 [ 481.439276][T15629] Dev loop1: unable to read RDB block 4 [ 481.445787][T15629] loop1: unable to read partition table [ 481.451687][T15629] loop1: partition table beyond EOD, truncated [ 481.458054][T15629] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 481.463879][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 481.483073][ T5911] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.504261][ T5911] usb 7-1: config 0 has no interface number 0 [ 481.510457][ T5911] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8174, setting to 1024 [ 481.527752][ T5911] usb 7-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 481.539153][ T5911] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 481.552896][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.565330][ T5974] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 481.578993][ T5911] usb 7-1: config 0 descriptor?? [ 481.586300][T15612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 481.603108][ T5911] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 481.735718][ T5974] usb 2-1: Using ep0 maxpacket: 32 [ 481.744502][ T5974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 481.754801][ T5974] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.768271][ T5974] usb 2-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 481.779635][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.788830][ T5974] usb 2-1: Product: syz [ 481.793177][ T5974] usb 2-1: Manufacturer: syz [ 481.802538][ T5974] usb 2-1: SerialNumber: syz [ 481.812604][ T5911] usb 7-1: USB disconnect, device number 10 [ 482.134404][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.189608][ T5974] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 482.261579][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.291249][ T5974] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 482.298615][T15681] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 482.305330][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.389712][ T5974] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 482.411476][ T5974] usb 2-1: USB disconnect, device number 112 [ 482.419209][T15685] loop1: detected capacity change from 0 to 4 [ 482.430911][T15685] Dev loop1: unable to read RDB block 4 [ 482.437218][T15685] loop1: unable to read partition table [ 482.445004][T15685] loop1: partition table beyond EOD, truncated [ 482.452308][T15685] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.467251][T13918] udevd[13918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.631636][T15694] loop1: detected capacity change from 0 to 4 [ 482.640139][T13918] Dev loop1: unable to read RDB block 4 [ 482.646660][T13918] loop1: unable to read partition table [ 482.652576][T13918] loop1: partition table beyond EOD, truncated [ 482.660530][T15694] Dev loop1: unable to read RDB block 4 [ 482.670906][T15694] loop1: unable to read partition table [ 482.678550][T15694] loop1: partition table beyond EOD, truncated [ 482.687105][T15694] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.768915][T15698] dvmrp0: entered promiscuous mode [ 482.843393][ T5832] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 482.887828][ T5974] usb 3-1: USB disconnect, device number 67 [ 482.937219][T15702] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 482.959510][T15702] binder: 15701:15702 ioctl c018620c 200000000580 returned -22 [ 483.007139][ T5832] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 483.023730][ T805] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 483.046381][T15708] tipc: Started in network mode [ 483.049747][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.069553][T15708] tipc: Node identity ac14140f, cluster identity 4711 [ 483.083961][ T5832] usb 9-1: config 0 descriptor?? [ 483.118051][T15708] tipc: New replicast peer: 255.255.255.255 [ 483.153833][T15708] tipc: Enabled bearer , priority 10 [ 483.201784][T15716] loop1: detected capacity change from 0 to 4 [ 483.214329][ T805] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 483.217870][T15716] Dev loop1: unable to read RDB block 4 [ 483.228276][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.232140][T15716] loop1: unable to read partition table [ 483.238366][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.249164][T15716] loop1: partition table beyond EOD, truncated [ 483.257400][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.260240][T15716] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.286044][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.301284][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.304827][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.317484][T15717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.330811][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.361505][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.369957][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.373031][T15717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.379014][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.400930][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.409072][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.418118][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.431379][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.439610][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.449285][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.461990][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.472479][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.483383][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.494724][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.503154][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.513081][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.524234][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.532400][ T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.542576][ T805] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.585468][ T805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.607134][ T805] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 483.630705][ T805] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 483.650244][ T805] usb 7-1: Product: syz [ 483.655507][T15728] loop1: detected capacity change from 0 to 4 [ 483.661632][ T805] usb 7-1: Manufacturer: syz [ 483.668558][ T5832] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 483.678122][ T805] usb 7-1: SerialNumber: syz [ 483.682947][ T5832] [drm:udl_init] *ERROR* Selecting channel failed [ 483.684518][T13918] Dev loop1: unable to read RDB block 4 [ 483.694992][ T805] usb 7-1: config 0 descriptor?? [ 483.700655][ T805] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 483.712394][T13918] loop1: unable to read partition table [ 483.719159][T13918] loop1: partition table beyond EOD, truncated [ 483.728114][T15728] Dev loop1: unable to read RDB block 4 [ 483.742907][T15728] loop1: unable to read partition table [ 483.763016][T15728] loop1: partition table beyond EOD, truncated [ 483.781534][T15728] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.782733][ T5832] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 483.820365][ T5832] [drm] Initialized udl on minor 2 [ 483.851662][ T5832] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 483.888396][ T5832] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 483.961832][ T5876] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 483.979629][ T5832] usb 9-1: USB disconnect, device number 50 [ 483.999411][ T5876] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 484.031096][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 484.039783][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 484.084745][ T5925] libceph: connect (1)[b::]:6789 error -101 [ 484.090917][ T5925] libceph: mon0 (1)[b::]:6789 connect error [ 484.120025][T15737] ceph: No mds server is up or the cluster is laggy [ 484.128029][T15740] ceph: No mds server is up or the cluster is laggy [ 484.263723][ T5974] tipc: Node number set to 2886997007 [ 484.423401][T15753] tipc: Enabled bearer , priority 0 [ 484.449140][T15752] tipc: Disabling bearer [ 484.684583][T15765] loop1: detected capacity change from 0 to 4 [ 484.697397][T15765] Dev loop1: unable to read RDB block 4 [ 484.710299][T15765] loop1: unable to read partition table [ 484.722933][T15765] loop1: partition table beyond EOD, truncated [ 484.737943][T15765] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 484.816080][T15757] CIFS: VFS: Malformed UNC in devname [ 484.916247][T15776] loop1: detected capacity change from 0 to 4 [ 484.925174][T15776] Dev loop1: unable to read RDB block 4 [ 484.930851][T15776] loop1: unable to read partition table [ 484.936944][T15776] loop1: partition table beyond EOD, truncated [ 484.948385][T15776] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.525604][T15793] loop1: detected capacity change from 0 to 4 [ 485.536501][T13918] Dev loop1: unable to read RDB block 4 [ 485.542275][T13918] loop1: unable to read partition table [ 485.549280][T13918] loop1: partition table beyond EOD, truncated [ 485.558710][T15793] Dev loop1: unable to read RDB block 4 [ 485.564573][T15793] loop1: unable to read partition table [ 485.570414][T15793] loop1: partition table beyond EOD, truncated [ 485.576807][T15793] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.660472][T15795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.734816][ T5876] usb 7-1: USB disconnect, device number 11 [ 485.744025][T15797] loop1: detected capacity change from 0 to 4 [ 485.750579][ T5876] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 485.755431][T13918] Dev loop1: unable to read RDB block 4 [ 485.766783][T13918] loop1: unable to read partition table [ 485.773046][T13918] loop1: partition table beyond EOD, truncated [ 485.780938][T15797] Dev loop1: unable to read RDB block 4 [ 485.789357][T15797] loop1: unable to read partition table [ 485.795537][T15797] loop1: partition table beyond EOD, truncated [ 485.804992][T15797] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.899557][T15800] (syz.8.3096,15800,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 485.912267][T15800] (syz.8.3096,15800,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 485.920439][T15800] (syz.8.3096,15800,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 485.929252][T15800] (syz.8.3096,15800,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 486.182944][T15809] loop1: detected capacity change from 0 to 4 [ 486.197101][T15809] Dev loop1: unable to read RDB block 4 [ 486.202773][T15809] loop1: unable to read partition table [ 486.213410][ T5876] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 486.222361][T15809] loop1: partition table beyond EOD, truncated [ 486.237259][T15809] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 486.363884][ T5876] usb 7-1: device descriptor read/64, error -71 [ 486.528562][T15820] loop1: detected capacity change from 0 to 4 [ 486.541134][T15820] Dev loop1: unable to read RDB block 4 [ 486.552635][T15820] loop1: unable to read partition table [ 486.561933][T15820] loop1: partition table beyond EOD, truncated [ 486.568433][T15820] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 486.614520][ T5876] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 486.651620][T15822] 9pnet_fd: p9_fd_create_unix (15822): problem connecting socket: ./file0: -111 [ 486.773773][ T5876] usb 7-1: device descriptor read/64, error -71 [ 486.883558][ T5876] usb usb7-port1: attempt power cycle [ 487.063317][ T805] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 487.216409][ T805] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.234929][ T5876] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 487.252673][ T805] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.273637][ T805] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 487.293094][ T805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.303631][ T5876] usb 7-1: device descriptor read/8, error -71 [ 487.314674][ T805] usb 9-1: config 0 descriptor?? [ 487.563375][ T5876] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 487.583965][ T5876] usb 7-1: device descriptor read/8, error -71 [ 487.643452][ T5832] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 487.693576][ T5876] usb usb7-port1: unable to enumerate USB device [ 487.793305][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 487.799852][ T5832] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 487.808118][ T5832] usb 3-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 487.818398][ T5832] usb 3-1: config 1 has no interface number 0 [ 487.824690][ T5832] usb 3-1: too many endpoints for config 1 interface 242 altsetting 183: 212, using maximum allowed: 30 [ 487.836370][ T5832] usb 3-1: config 1 interface 242 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 212 [ 487.850404][ T5832] usb 3-1: config 1 interface 242 has no altsetting 0 [ 487.859334][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.868759][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.876845][ T5832] usb 3-1: Product: syz [ 487.881020][ T5832] usb 3-1: Manufacturer: syz [ 487.885701][ T5832] usb 3-1: SerialNumber: syz [ 487.935389][ T805] hid-led 0003:1D34:000A.001E: probe with driver hid-led failed with error -71 [ 487.957258][ T805] usb 9-1: USB disconnect, device number 51 [ 488.104392][ T5832] usb 3-1: USB disconnect, device number 68 [ 488.582446][T15837] loop1: detected capacity change from 0 to 4 [ 488.596390][T15837] Dev loop1: unable to read RDB block 4 [ 488.602337][T15837] loop1: unable to read partition table [ 488.608352][T15837] loop1: partition table beyond EOD, truncated [ 488.614678][T15837] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 488.775362][T15846] loop1: detected capacity change from 0 to 4 [ 488.782281][T15846] Dev loop1: unable to read RDB block 4 [ 488.788340][T15846] loop1: unable to read partition table [ 488.795615][T15846] loop1: partition table beyond EOD, truncated [ 488.801794][T15846] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 488.953837][ T5911] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 488.963151][T15852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3116'. [ 488.980792][T15852] VFS: Mount too revealing [ 489.046120][T15857] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 489.057510][T15856] mkiss: ax0: crc mode is auto. [ 489.065639][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3117'. [ 489.069282][T15857] netlink: 'syz.8.3115': attribute type 10 has an invalid length. [ 489.089749][T15857] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3115'. [ 489.107076][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 489.116182][ T5911] usb 3-1: config 8 has an invalid interface number: 122 but max is 0 [ 489.124684][ T5911] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 489.142728][T15857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.167683][ T5911] usb 3-1: config 8 has no interface number 0 [ 489.180423][ T5911] usb 3-1: string descriptor 0 read error: -22 [ 489.187070][ T5911] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=58.89 [ 489.201047][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.227147][ T5911] ldusb 3-1:8.122: Interrupt in endpoint not found [ 489.430394][ T5875] usb 3-1: USB disconnect, device number 69 [ 489.628858][T15869] loop1: detected capacity change from 0 to 4 [ 489.645735][T13918] Dev loop1: unable to read RDB block 4 [ 489.651361][T13918] loop1: unable to read partition table [ 489.658864][T13918] loop1: partition table beyond EOD, truncated [ 489.668095][T15869] Dev loop1: unable to read RDB block 4 [ 489.678420][T15869] loop1: unable to read partition table [ 489.692459][T15869] loop1: partition table beyond EOD, truncated [ 489.705164][T15869] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.829186][T15871] loop1: detected capacity change from 0 to 4 [ 489.839703][T13918] Dev loop1: unable to read RDB block 4 [ 489.845466][T13918] loop1: unable to read partition table [ 489.856011][T13918] loop1: partition table beyond EOD, truncated [ 489.863686][T15871] Dev loop1: unable to read RDB block 4 [ 489.875641][T15871] loop1: unable to read partition table [ 489.881505][T15871] loop1: partition table beyond EOD, truncated [ 489.895396][T15871] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 490.216245][T15894] 9p: Bad value for 'rfdno' [ 490.263384][ T805] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 490.313369][ T5925] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 490.403596][ T5875] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 490.413367][ T805] usb 9-1: Using ep0 maxpacket: 16 [ 490.425860][ T805] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 490.443356][ T805] usb 9-1: config 0 has no interface number 0 [ 490.444346][ T5925] usb 3-1: device descriptor read/64, error -71 [ 490.449484][ T805] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 490.449513][ T805] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 1344, setting to 1024 [ 490.503351][ T805] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 490.516792][ T805] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 490.526113][ T805] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.534167][ T805] usb 9-1: Product: syz [ 490.538394][ T805] usb 9-1: Manufacturer: syz [ 490.543010][ T805] usb 9-1: SerialNumber: syz [ 490.551167][ T805] usb 9-1: config 0 descriptor?? [ 490.561177][T15880] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 490.568560][T15880] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 490.575831][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 490.584229][ T5875] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 490.592909][ T5875] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.603422][ T5875] usb 7-1: config 0 has no interface number 0 [ 490.612605][ T5875] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 490.621936][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.631534][T15669] wlan1: Trigger new scan to find an IBSS to join [ 490.632102][ T5875] usb 7-1: Product: syz [ 490.646728][ T5875] usb 7-1: Manufacturer: syz [ 490.651537][ T5875] usb 7-1: SerialNumber: syz [ 490.659724][ T5875] usb 7-1: config 0 descriptor?? [ 490.668263][ T5875] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 490.714682][ T5925] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 490.782402][T15880] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 490.789923][T15880] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 490.853361][ T5925] usb 3-1: device descriptor read/64, error -71 [ 490.869194][ T5875] usb 7-1: qt2_attach - failed to power on unit: -71 [ 490.878601][ T5875] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 490.894656][ T5875] usb 7-1: USB disconnect, device number 16 [ 490.963661][ T5925] usb usb3-port1: attempt power cycle [ 491.072461][T15897] loop1: detected capacity change from 0 to 4 [ 491.082204][T11936] Dev loop1: unable to read RDB block 4 [ 491.088849][T11936] loop1: unable to read partition table [ 491.096526][T11936] loop1: partition table beyond EOD, truncated [ 491.103960][T15897] Dev loop1: unable to read RDB block 4 [ 491.109800][T15897] loop1: unable to read partition table [ 491.115830][T15897] loop1: partition table beyond EOD, truncated [ 491.122026][T15897] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.200621][ T805] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 491.217111][ T805] asix 9-1:0.251: probe with driver asix failed with error -524 [ 491.303407][ T5925] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 491.326139][ T5925] usb 3-1: device descriptor read/8, error -71 [ 491.347583][T15904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.409187][T15908] loop1: detected capacity change from 0 to 4 [ 491.423065][T15908] Dev loop1: unable to read RDB block 4 [ 491.438224][T15908] loop1: unable to read partition table [ 491.445844][T15908] loop1: partition table beyond EOD, truncated [ 491.452434][T15908] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.553207][T15880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.565867][T15880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.593630][ T5925] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 491.614053][ T5925] usb 3-1: device descriptor read/8, error -71 [ 491.724021][ T5925] usb usb3-port1: unable to enumerate USB device [ 491.753358][ T5911] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 491.853379][ T5875] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 491.903394][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 491.910803][ T5911] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 491.919156][ T5911] usb 2-1: config 0 has no interface number 0 [ 491.925318][ T5911] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 491.935924][ T5911] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.947512][ T5911] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 491.957462][ T5911] usb 2-1: config 0 interface 196 has no altsetting 0 [ 491.966379][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 491.976408][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.984539][ T5911] usb 2-1: Product: syz [ 491.988697][ T5911] usb 2-1: Manufacturer: syz [ 491.993336][ T5911] usb 2-1: SerialNumber: syz [ 491.999821][ T5911] usb 2-1: config 0 descriptor?? [ 492.005592][T15912] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 492.016942][ T5875] usb 7-1: unable to get BOS descriptor or descriptor too short [ 492.025685][ T5875] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.036263][ T5875] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 492.048760][ T5875] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 492.059966][ T5875] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 492.069420][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.077564][ T5875] usb 7-1: Product: syz [ 492.081752][ T5875] usb 7-1: Manufacturer: syz [ 492.086494][ T5875] usb 7-1: SerialNumber: syz [ 492.666171][ T5911] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 492.682248][ T5911] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 492.873502][ T805] usb 2-1: USB disconnect, device number 113 [ 492.966398][ T805] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 493.043729][ T5911] usb 9-1: USB disconnect, device number 52 [ 493.161393][T15938] loop1: detected capacity change from 0 to 4 [ 493.192280][T15938] Dev loop1: unable to read RDB block 4 [ 493.199102][T15938] loop1: unable to read partition table [ 493.205308][T15938] loop1: partition table beyond EOD, truncated [ 493.218591][T15938] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 493.361233][T15941] syz.2.3140 (15941) used greatest stack depth: 17408 bytes left [ 493.426447][ T5829] Bluetooth: hci6: unexpected event for opcode 0x2060 [ 493.441698][T15946] GUP no longer grows the stack in syz.2.3142 (15946): 200000004000-20000000a000 (200000002000) [ 493.456361][T15946] CPU: 0 UID: 0 PID: 15946 Comm: syz.2.3142 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.456387][T15946] Tainted: [L]=SOFTLOCKUP [ 493.456395][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.456411][T15946] Call Trace: [ 493.456419][T15946] [ 493.456426][T15946] dump_stack_lvl+0xe8/0x150 [ 493.456466][T15946] __get_user_pages+0x2378/0x2720 [ 493.456506][T15946] ? mtree_load+0x12a/0x780 [ 493.456542][T15946] get_user_pages_remote+0x2f6/0xab0 [ 493.456566][T15946] ? __pfx_mtree_load+0x10/0x10 [ 493.456598][T15946] ? __pfx_get_user_pages_remote+0x10/0x10 [ 493.456622][T15946] ? __access_remote_vm+0xa3/0x6f0 [ 493.456648][T15946] ? __access_remote_vm+0x42c/0x6f0 [ 493.456678][T15946] __access_remote_vm+0x222/0x6f0 [ 493.456710][T15946] ? __pfx___access_remote_vm+0x10/0x10 [ 493.456740][T15946] ? alloc_pages_noprof+0x13b/0x2a0 [ 493.456765][T15946] proc_pid_cmdline_read+0x419/0x7f0 [ 493.456794][T15946] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 493.456819][T15946] ? rw_verify_area+0x2a6/0x4d0 [ 493.456850][T15946] vfs_readv+0x587/0x840 [ 493.456874][T15946] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 493.456903][T15946] ? __pfx_vfs_readv+0x10/0x10 [ 493.456938][T15946] ? __fget_files+0x2a/0x420 [ 493.456963][T15946] ? __fget_files+0x3a0/0x420 [ 493.456985][T15946] ? __fget_files+0x2a/0x420 [ 493.457017][T15946] __x64_sys_preadv+0x19f/0x2a0 [ 493.457038][T15946] ? __pfx___x64_sys_preadv+0x10/0x10 [ 493.457068][T15946] do_syscall_64+0x14d/0xf80 [ 493.457081][T15946] ? trace_irq_disable+0x3b/0x150 [ 493.457102][T15946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.457121][T15946] ? clear_bhb_loop+0x40/0x90 [ 493.457144][T15946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.457169][T15946] RIP: 0033:0x7f8475f9c799 [ 493.457186][T15946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.457201][T15946] RSP: 002b:00007f8476dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 493.457221][T15946] RAX: ffffffffffffffda RBX: 00007f8476215fa0 RCX: 00007f8475f9c799 [ 493.457236][T15946] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 493.457248][T15946] RBP: 00007f8476032c99 R08: 00000000fffffff9 R09: 0000000000000000 [ 493.457260][T15946] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 493.457271][T15946] R13: 00007f8476216038 R14: 00007f8476215fa0 R15: 00007ffd596f6a28 [ 493.457301][T15946] [ 493.714032][T15659] wlan1: Trigger new scan to find an IBSS to join [ 493.899223][T15962] loop1: detected capacity change from 0 to 4 [ 493.908447][T13918] Dev loop1: unable to read RDB block 4 [ 493.924576][T13918] loop1: unable to read partition table [ 493.931056][T13918] loop1: partition table beyond EOD, truncated [ 493.951287][T15962] Dev loop1: unable to read RDB block 4 [ 493.961898][T15962] loop1: unable to read partition table [ 493.969515][T15962] loop1: partition table beyond EOD, truncated [ 493.978488][T15962] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 493.988064][ T805] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 494.072094][T15968] netlink: 'syz.2.3146': attribute type 10 has an invalid length. [ 494.087978][T15968] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3146'. [ 494.146610][ T805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 494.171418][ T805] usb 2-1: not running at top speed; connect to a high speed hub [ 494.193873][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.211072][ T805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.224020][ T31] INFO: task syz.7.2055:12515 blocked for more than 143 seconds. [ 494.239636][ T31] Tainted: G L syzkaller #0 [ 494.248230][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.257264][ T805] usb 2-1: string descriptor 0 read error: -22 [ 494.264219][ T805] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.273698][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.281845][ T31] task:syz.7.2055 state:D stack:25192 pid:12515 tgid:12514 ppid:11932 task_flags:0x400140 flags:0x00080002 [ 494.304512][ T805] usb 2-1: 0:2 : does not exist [ 494.310607][ T31] Call Trace: [ 494.318707][ T31] [ 494.326124][ T31] __schedule+0x1665/0x5590 [ 494.335580][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.340682][ T31] ? __pfx___schedule+0x10/0x10 [ 494.346199][ T31] ? schedule+0x90/0x360 [ 494.350563][ T31] schedule+0x164/0x360 [ 494.355277][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.360916][ T31] rwsem_down_write_slowpath+0x883/0x1080 [ 494.367112][ T31] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 494.373189][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 494.380112][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 494.385612][ T31] ? kernel_text_address+0xa5/0xe0 [ 494.390764][ T31] ? __kernel_text_address+0xd/0x30 [ 494.396176][ T31] down_write+0x1bc/0x200 [ 494.400951][ T31] ? __pfx_down_write+0x10/0x10 [ 494.405942][ T31] userfaultfd_ioctl+0x21fb/0x4c70 [ 494.411150][ T31] ? __kasan_slab_free+0x5c/0x80 [ 494.416163][ T31] ? kfree+0x1c5/0x650 [ 494.420265][ T31] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 494.427394][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 494.432725][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 494.438663][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 494.444575][ T31] ? do_vfs_ioctl+0x1166/0x1530 [ 494.449548][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 494.454771][ T31] ? do_futex+0x333/0x420 [ 494.459216][ T31] ? __fget_files+0x2a/0x420 [ 494.463880][ T31] ? __fget_files+0x3a0/0x420 [ 494.468654][ T31] ? __fget_files+0x2a/0x420 [ 494.473379][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 494.478347][ T31] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 494.484143][ T31] __se_sys_ioctl+0xfc/0x170 [ 494.488774][ T31] do_syscall_64+0x14d/0xf80 [ 494.493419][ T31] ? trace_irq_disable+0x3b/0x150 [ 494.498470][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.507753][ T31] ? clear_bhb_loop+0x40/0x90 [ 494.513195][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.519245][ T31] RIP: 0033:0x7ff75d79c799 [ 494.523738][ T31] RSP: 002b:00007ff75e5f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.532191][ T31] RAX: ffffffffffffffda RBX: 00007ff75da15fa0 RCX: 00007ff75d79c799 [ 494.540298][ T31] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000008 [ 494.548323][ T31] RBP: 00007ff75d832c99 R08: 0000000000000000 R09: 0000000000000000 [ 494.556435][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.564459][ T31] R13: 00007ff75da16038 R14: 00007ff75da15fa0 R15: 00007ffdb287f9e8 [ 494.572448][ T31] [ 494.577469][ T31] [ 494.577469][ T31] Showing all locks held in the system: [ 494.586104][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 494.591421][ T31] #0: ffff8880b843ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 494.604732][ T31] 1 lock held by khungtaskd/31: [ 494.609679][ T31] #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 494.619879][ T31] 6 locks held by kworker/1:2/805: [ 494.641221][ T31] #0: ffff8880222da140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 494.652008][ T31] #1: ffffc90004b17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 494.663399][ T31] #2: ffff88802b233190 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 494.672371][ T31] #3: ffff888079457190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 494.681656][ T31] #4: ffff888076bfc158 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 494.691058][ T31] #5: ffffffff8ff5d1c0 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x82e/0x2330 [ 494.701057][ T31] 2 locks held by getty/5595: [ 494.706683][ T31] #0: ffff888037a570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 494.714786][ T5829] Bluetooth: hci4: command 0x2016 tx timeout [ 494.717185][ T31] #1: ffffc9000332b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 494.732830][ T31] 4 locks held by kworker/1:4/5875: [ 494.738093][ T31] #0: ffff8880222da140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 494.748987][ T31] #1: ffffc900045b7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 494.760280][ T31] #2: ffff88802b45b190 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 494.769322][ T31] #3: ffff88807950b190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 494.778619][ T31] 6 locks held by kworker/u9:3/7732: [ 494.789045][ T31] #0: ffff88802af8b140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 494.799340][ T31] #1: ffffc9000fdefc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 494.811851][ T31] #2: ffff888067fc0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 494.821913][ T31] #3: ffff888067fc00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 494.832113][ T31] #4: ffffffff901836e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 494.841992][ T31] #5: ffff88804d22c2f0 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 494.851462][ T31] 4 locks held by udevd/11936: [ 494.856271][ T31] #0: ffff88804c2431b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 494.865406][ T31] #1: ffff888037062880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 494.875031][ T31] #2: ffff888058011b48 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 494.885346][ T31] #3: ffff88807950b190 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 494.896542][ T31] 1 lock held by syz.7.2055/12515: [ 494.901681][ T31] #0: ffff88801d38dab8 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_ioctl+0x21fb/0x4c70 [ 494.912101][ T31] 3 locks held by kworker/u8:12/15663: [ 494.917903][ T31] #0: ffff88813fe44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 494.929334][ T31] #1: ffffc9000561fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 494.939998][ T31] #2: ffffffff8fff6340 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 494.949153][ T31] 3 locks held by kworker/u8:13/15665: [ 494.954687][ T31] 3 locks held by kworker/u8:14/15667: [ 494.960162][ T31] #0: ffff88813fe44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 494.971276][ T31] #1: ffffc9000565fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 494.983008][ T31] #2: ffff88804f830780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x4a0 [ 494.993121][ T31] 1 lock held by syz.6.3138/15919: [ 494.998321][ T31] #0: ffffffff8eb638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 495.009285][ T31] 1 lock held by syz.8.3141/15944: [ 495.016052][ T31] #0: ffffffff8fff6340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 495.025786][ T31] 2 locks held by syz.2.3146/15968: [ 495.031000][ T31] #0: ffffffff8fff6340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 495.039998][ T31] #1: ffffffff8eb638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 495.051098][ T31] [ 495.054414][ T31] ============================================= [ 495.054414][ T31] [ 495.099578][ T31] NMI backtrace for cpu 1 [ 495.099598][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 495.099623][ T31] Tainted: [L]=SOFTLOCKUP [ 495.099630][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.099641][ T31] Call Trace: [ 495.099649][ T31] [ 495.099658][ T31] dump_stack_lvl+0xe8/0x150 [ 495.099691][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 495.099714][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 495.099742][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 495.099769][ T31] sys_info+0x135/0x170 [ 495.099796][ T31] watchdog+0x1002/0x1060 [ 495.099826][ T31] ? watchdog+0x1da/0x1060 [ 495.099853][ T31] kthread+0x388/0x470 [ 495.099876][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.099896][ T31] ? __pfx_kthread+0x10/0x10 [ 495.099919][ T31] ret_from_fork+0x51e/0xb90 [ 495.099947][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.099971][ T31] ? __switch_to+0xc7d/0x1450 [ 495.099997][ T31] ? __pfx_kthread+0x10/0x10 [ 495.100019][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.100049][ T31] [ 495.100078][ T31] Sending NMI from CPU 1 to CPUs 0: [ 495.216631][ C0] NMI backtrace for cpu 0 [ 495.216650][ C0] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 495.216675][ C0] Tainted: [L]=SOFTLOCKUP [ 495.216681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.216692][ C0] RIP: 0010:switch_fpu_return+0x0/0x1e0 [ 495.216717][ C0] Code: 8b 25 88 65 e1 0c e9 04 fe ff ff e8 ba f7 59 00 e9 f4 fd ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 49 bc 00 00 00 00 00 fc [ 495.216732][ C0] RSP: 0018:ffffc90003aa7ed0 EFLAGS: 00000006 [ 495.216748][ C0] RAX: ffffffff816d0165 RBX: 0000000000080000 RCX: ffff888036991e80 [ 495.216761][ C0] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000080000 [ 495.216772][ C0] RBP: ffffc90003aa7f38 R08: ffff888036991e87 R09: 1ffff11006d323d0 [ 495.216786][ C0] R10: dffffc0000000000 R11: ffffed1006d323d1 R12: 0000000000000000 [ 495.216798][ C0] R13: 0000000000000000 R14: ffffc90003aa7f48 R15: ffff888036991e80 [ 495.216811][ C0] FS: 0000555571e08540(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000 [ 495.216826][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.216838][ C0] CR2: 00007f729877dfe0 CR3: 000000002b492000 CR4: 00000000003526f0 [ 495.216854][ C0] Call Trace: [ 495.216861][ C0] [ 495.216868][ C0] arch_exit_to_user_mode_prepare+0x9d/0xc0 [ 495.216889][ C0] do_syscall_64+0x1ce/0xf80 [ 495.216904][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.216922][ C0] ? clear_bhb_loop+0x40/0x90 [ 495.216942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.216959][ C0] RIP: 0033:0x7f54e9957917 [ 495.216973][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 495.216988][ C0] RSP: 002b:00007ffd7635c4f0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 495.217005][ C0] RAX: 0000000000000000 RBX: 0000555571e08540 RCX: 00007f54e9957917 [ 495.217017][ C0] RDX: 00007ffd7635c530 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.217028][ C0] RBP: 00007ffd7635ca10 R08: 0000000000000000 R09: 0000000000000000 [ 495.217039][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 495.217049][ C0] R13: 00007ffd7635c56c R14: 00007ffd7635c600 R15: 0000000000000000 [ 495.217069][ C0] [ 495.456738][ T5875] snd-ua101 7-1:1.1: sample format descriptor not found [ 495.464205][ T5875] snd-ua101 7-1:1.0: invalid num_altsetting [ 495.485745][ T5875] usb 7-1: USB disconnect, device number 17 [ 495.492113][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 495.498974][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 495.509646][ T31] Tainted: [L]=SOFTLOCKUP [ 495.513952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.523986][ T31] Call Trace: [ 495.527253][ T31] [ 495.530182][ T31] vpanic+0x56c/0xa60 [ 495.534151][ T31] ? __pfx___schedule+0x10/0x10 [ 495.538989][ T31] ? __pfx_vpanic+0x10/0x10 [ 495.543485][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 495.549653][ T31] panic+0xc5/0xd0 [ 495.553376][ T31] ? __pfx_panic+0x10/0x10 [ 495.557783][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 495.563145][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 495.569285][ T31] watchdog+0x105b/0x1060 [ 495.573601][ T31] ? watchdog+0x1da/0x1060 [ 495.578000][ T31] kthread+0x388/0x470 [ 495.582052][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.586711][ T31] ? __pfx_kthread+0x10/0x10 [ 495.591293][ T31] ret_from_fork+0x51e/0xb90 [ 495.595872][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.600982][ T31] ? __switch_to+0xc7d/0x1450 [ 495.605653][ T31] ? __pfx_kthread+0x10/0x10 [ 495.610235][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.614998][ T31] [ 495.618556][ T31] Kernel Offset: disabled [ 495.622866][ T31] Rebooting in 86400 seconds..