last executing test programs: 13m44.088034267s ago: executing program 32 (id=877): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xe8, 0xa}, 0x2) r1 = socket$kcm(0x10, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000000)=0x1) gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x44) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f00000008c0)={[0xd61b, 0x6e997763, 0x7ff, 0x2, 0x1000, 0x6, 0x7, 0xe9, 0x5, 0xc, 0x8, 0x7ff, 0x3, 0x7, 0x6, 0x6, 0x7f, 0x3, 0x4, 0x5, 0x400, 0xffff, 0x0, 0xb, 0x7, 0xfffffff8, 0x9, 0x38, 0x2, 0x8, 0x2, 0x0, 0x6, 0x5827, 0x81, 0x0, 0x0, 0xfffffffe, 0x97d, 0xa14, 0x1, 0xf198, 0x1, 0xfffff801, 0x9, 0xff, 0x4, 0x3ff, 0x0, 0xcb6, 0x8, 0x5, 0x7fff, 0x0, 0x4, 0x8, 0xf2800000, 0xffffffff, 0x3, 0x4, 0x6, 0x400, 0xffff, 0x21, 0x6, 0x3, 0x2, 0x4, 0x6, 0xfb1, 0xffffff80, 0x1, 0x200, 0x7, 0x4b17b469, 0x4, 0x7c, 0x6, 0x3, 0x9e, 0x1a893890, 0x1, 0x4, 0x2, 0x4, 0x5, 0x7f, 0x4ad2, 0x5, 0x183, 0x6, 0x26, 0x8, 0x81, 0x10001, 0xffffffff, 0x940, 0x0, 0xfffffffb, 0x5, 0x7fffffff, 0x3ff, 0x8, 0x4b57, 0x8, 0xd, 0x80000000, 0xd, 0xe, 0x2, 0xf54, 0xb, 0x8001, 0x7fff, 0x7ff, 0x1, 0x7fff, 0x7, 0xd0fd, 0x9, 0x0, 0x0, 0x0, 0xc8e, 0x0, 0x7, 0x200, 0x0, 0x1, 0xff, 0x5, 0x2, 0xfa27, 0x1, 0x52, 0x8, 0x7, 0x3, 0x2, 0x7, 0x8, 0x1, 0x80, 0x7, 0x9, 0x1, 0xc95, 0xdd, 0x8, 0x10001, 0x5, 0x7, 0x4, 0x1, 0xfffffff8, 0x500, 0x7f, 0x0, 0x7ff, 0x401, 0xc0, 0x9, 0x1c56, 0x3, 0x2, 0x8, 0xcd, 0x8, 0x200, 0x0, 0x5, 0x9, 0x3ff, 0x1578, 0x81, 0x7f, 0xd, 0x1, 0x2, 0xc, 0x15a271b1, 0x6, 0x7f, 0xff, 0x6, 0xdb4c, 0x3ff, 0x6, 0xec9, 0x1, 0x4756547f, 0x3, 0xffffff3c, 0x0, 0x401, 0xa, 0x5, 0x0, 0x5, 0x1000, 0xfffffff8, 0x9, 0x17, 0xfffffffa, 0x140, 0x2, 0x6, 0xfffffffe, 0x5, 0x6, 0xfa6, 0x4, 0xf, 0x10001, 0x3, 0xffffffff, 0x4fa8, 0x5, 0xd6, 0x8001, 0xb4cb, 0x7, 0x10, 0x0, 0x7, 0x1000, 0x3, 0x2, 0x1ff, 0x7, 0x0, 0x3, 0x5, 0x1, 0x400, 0x850, 0xd, 0xfff, 0x1, 0xffffffff, 0xf, 0x4, 0x7, 0x4, 0x4, 0x5, 0x80, 0x8, 0x5, 0x6, 0x200, 0xe, 0x5, 0x1, 0xfffffffe, 0x1df, 0x81, 0x7, 0x8, 0x0, 0xffff, 0x3, 0x80000001, 0x1, 0x5, 0x0, 0x80000000, 0x724, 0x3ffc0000, 0x7fffffff, 0x6, 0xaba, 0x9, 0x0, 0x3, 0x6, 0x9, 0x4, 0x2, 0x40, 0x4, 0x4, 0x2, 0x5, 0x3, 0x7f, 0x2, 0x5, 0x0, 0x1, 0x892d38e, 0x28, 0x42a, 0x1, 0xfffff000, 0xd94d, 0x5, 0x5, 0xfbcd, 0x80000001, 0xfc00000, 0x1, 0x3, 0x2, 0xd, 0x7, 0x5, 0x8, 0x1, 0x3, 0x6, 0x8, 0x10001, 0x0, 0x8, 0x3, 0xfffffffb, 0x2, 0x4, 0x0, 0x4, 0x0, 0x9, 0x7, 0x4, 0x9, 0x1, 0x1000, 0x7, 0x100, 0x1, 0x3e1, 0x42ae, 0x8, 0x0, 0x10001, 0x6, 0x5, 0xffffffff, 0x8, 0x2, 0xfffffffe, 0x7, 0x1, 0x3, 0x6, 0x6, 0x1, 0x1, 0xfffc0000, 0x800, 0xfffffff9, 0x0, 0xc, 0x6, 0x9, 0xd81, 0x0, 0x1, 0xc, 0x1ff, 0xfffffff3, 0x6, 0x2, 0x9, 0x9, 0x0, 0x7, 0x7, 0x9, 0x1a4, 0xffff, 0x3, 0x1, 0x8, 0xa93, 0x2, 0x1, 0x44, 0x0, 0x6, 0x7ff, 0x7, 0x8b9, 0x1, 0x6, 0x9, 0x5, 0x1, 0xffffffff, 0x9, 0x4, 0xe6, 0xffff545d, 0x49a0fe06, 0xd, 0x0, 0x2, 0xfffffffb, 0xffffffff, 0xfff, 0x58c, 0x393, 0x3, 0x7, 0x1, 0x2, 0xead, 0x5c57, 0x7, 0xffffffff, 0x5, 0x0, 0x8, 0x0, 0xfffffff8, 0x1, 0x0, 0x9, 0x12be, 0x40, 0xfffffff8, 0xc, 0xc5d6, 0x5, 0x2, 0x5000000, 0x1, 0x2, 0x8, 0x4, 0x8, 0xf, 0x7, 0x7, 0x5, 0x7, 0x57b5, 0x904b042, 0x8, 0x5ac, 0xff, 0x5, 0x9, 0x5fc, 0x101, 0x2, 0x81, 0x40, 0x0, 0x0, 0x2, 0x88b, 0x6c, 0x6, 0x6, 0x8, 0x1, 0xfffffff7, 0x1, 0x5, 0x3, 0x1, 0xde, 0x3000000, 0x30, 0x5, 0x0, 0x4, 0xd5, 0x5, 0x3, 0x100, 0x9, 0x701, 0x7f, 0x2000, 0x5, 0x8, 0xf63, 0x9, 0x3, 0x3, 0x5, 0x2, 0x8, 0x0, 0x6, 0x1, 0x3, 0x9c, 0xffff, 0x7, 0x3, 0x9, 0xe14, 0x4, 0x6, 0xfffffffd, 0x45a3, 0xb3, 0x10000, 0x8, 0x3, 0xc42, 0xa8e9, 0x5, 0x2, 0x0, 0x38, 0x6, 0xffffffa0, 0x4, 0x0, 0x3540, 0x9, 0x7, 0xfffffffd, 0x1, 0x3, 0x3, 0x3, 0x5, 0x5, 0x5, 0xaa, 0x1, 0x80000001, 0x6, 0x1, 0x2, 0xe, 0xc, 0x1, 0xfffffffb, 0x81, 0x2, 0x3ff, 0xfffffff2, 0x800, 0x2, 0x7fffffff, 0x384ae7f8, 0x0, 0x4, 0x3, 0x1, 0x3, 0x2b1, 0x6, 0x41be, 0x5, 0x95, 0x9, 0x0, 0x5, 0xe, 0x7, 0x1, 0x6, 0x58b6e940, 0x6, 0x7, 0x4, 0x1ff, 0x7d2b, 0x1, 0x7f, 0x8, 0x2, 0x1fe, 0x80, 0xfffffffd, 0x0, 0x9, 0xffffffff, 0x0, 0x7b, 0x0, 0x2, 0x10, 0x10, 0x20, 0x1000, 0x9, 0x5, 0x3, 0x2, 0xeca, 0x0, 0x4, 0x5, 0x1ff, 0xc, 0x1, 0x0, 0x2, 0xd3, 0xec1, 0x1, 0xc, 0x0, 0x8, 0x8, 0x2, 0xffff, 0x2, 0x7, 0xffff7fec, 0x3, 0xc628, 0xf, 0x0, 0x4bd7550e, 0x9, 0x80000000, 0x0, 0x0, 0x8, 0x8, 0xf, 0x8, 0x9, 0x2, 0x8, 0x1, 0xfb, 0x8000, 0x6, 0x9, 0x7, 0xd27, 0x0, 0xccc, 0x6, 0x1, 0x7, 0x9, 0xffff, 0x3, 0x8, 0x6, 0x1, 0x5, 0x1, 0xc9f, 0xffffffff, 0xe8, 0x7, 0x7ff, 0x79, 0x66, 0xc77, 0x6, 0x6, 0x40, 0x3, 0x0, 0x0, 0x7fffffff, 0x8000, 0x5, 0x6b, 0x7ff, 0x100, 0x974c, 0x3, 0x10000, 0x4, 0x3, 0x7, 0x9, 0x3, 0x2, 0x8, 0xfff, 0xd72, 0x8, 0x5, 0x3, 0x3, 0x74, 0x9dd, 0x7f3, 0x2, 0x87, 0x4, 0x7, 0x7, 0x7b, 0x2, 0xfffffff0, 0x3ff, 0xa544, 0xa0, 0x4, 0x9, 0xc, 0xa, 0x10001, 0xb, 0xa42e, 0x2, 0x401, 0x7f, 0x7ff, 0x1000, 0x1ff, 0x100, 0x7ff, 0x7, 0x800, 0x8, 0x5, 0x986, 0x3, 0x0, 0x8, 0x6f, 0x6, 0x5, 0x1, 0x1, 0x5021, 0xfffffff7, 0xb9, 0x2, 0x2, 0x8, 0x81, 0x6, 0x8, 0xc, 0x4, 0xfffffffb, 0x3, 0x6, 0x156, 0x6, 0xd2, 0x1, 0x2, 0x7, 0x9, 0x9, 0x6921, 0x9, 0x101, 0x401, 0xfffffffa, 0x8, 0x3, 0xffffff80, 0x8001, 0xc, 0x2, 0x6, 0x8c, 0x0, 0x27, 0x8, 0x5, 0x5, 0x52, 0x200, 0x101, 0x80, 0x2000, 0x80, 0x1, 0x7, 0x1, 0xe9f, 0xffffff7d, 0xffff3a84, 0x1, 0xfff, 0xd, 0xffffffff, 0x2, 0x7, 0x85cc, 0x1, 0x0, 0x3, 0xe, 0x1, 0xd3e6, 0xffff, 0xc4, 0x7fff, 0x1, 0x6, 0x200, 0x8, 0x2, 0xfffffff7, 0x80, 0x2, 0x0, 0x6, 0x7ff, 0x0, 0x10001, 0x3, 0x7309, 0x7fffffff, 0x4, 0x101, 0xffffffff, 0xffffffff, 0x8, 0x5, 0x9, 0x4, 0x6df93c6b, 0x2f9e, 0x52, 0xffff0001, 0x3, 0xffffffff, 0x9, 0xfffffff8, 0x1, 0x0, 0x80000001, 0xbf76, 0x0, 0x80000001, 0xe, 0x10001, 0x7, 0x3, 0x800, 0x8, 0x8, 0x5, 0x1, 0x5, 0x40, 0xd93, 0x3, 0x9, 0x80, 0x8, 0x9, 0x2, 0x6, 0x10000, 0x5, 0x7, 0x5, 0x5, 0x6, 0x9, 0x9, 0x1, 0x1f, 0x7, 0x9, 0x80000000, 0x5, 0xfff, 0xffff, 0xfffff138, 0x81, 0x8, 0x0, 0x3, 0x40, 0x3, 0x7, 0x0, 0x2, 0x800, 0x7, 0x3, 0x8, 0x9, 0x9, 0x4, 0x9, 0x8000, 0x9, 0xfff, 0x5, 0x4000000, 0x67, 0x81, 0x5, 0xf36, 0x7, 0x3, 0x6b41, 0x81, 0x6, 0x2, 0x6, 0x1, 0x0, 0x5, 0x3ff, 0xffffff16, 0x0, 0x5f2, 0x4, 0x9, 0x6, 0x1, 0x9, 0x2, 0x5, 0x1, 0x8, 0x9, 0x5, 0x1, 0x6, 0x101, 0xffff, 0x40, 0xd7, 0x9, 0xc00000, 0x10, 0x80000000, 0x9, 0x3ff, 0x200, 0x800, 0x0, 0xc2, 0x2, 0x4, 0x7, 0x0, 0x9, 0x28cb, 0x6, 0xfffffffa, 0x2, 0x200, 0x7, 0x0, 0xdde0, 0x27, 0x8, 0x16, 0x80000001, 0x0, 0xd2c, 0x2, 0x5, 0x10, 0x1, 0x0, 0x0, 0x4, 0x1, 0x76f8, 0xc, 0x1, 0xffff, 0x77e, 0x4, 0xba2, 0xfffffffe, 0x8b, 0xa, 0x3, 0x39f0000, 0x4, 0x6, 0x7, 0xd, 0x78, 0x0, 0x3, 0x7, 0xffffffff, 0xb, 0x8, 0x6, 0x8, 0x9, 0x10, 0x24653d24, 0x2, 0x4, 0x40, 0x8, 0x3, 0xfffffffd, 0xff, 0x3, 0x7eea, 0x1, 0x80000001, 0x2, 0xfffff8d7, 0x8, 0x2, 0x9, 0xffff, 0x4, 0x1e, 0x4010, 0x0, 0x3ff, 0x4, 0x0, 0x5, 0x2, 0x1, 0x7, 0x1, 0x94f, 0x6, 0x8, 0xffff21fc, 0x7f, 0x859, 0x81, 0xb5e]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000280)={r3, &(0x7f0000000100), 0x434002, &(0x7f00000001c0)={@_ha_fsid={[0x7fffffff, 0x5b]}, {0xfebe, 0x5, 0x0, 0x5}}, 0x401, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x99b, 0x8, 0xc051, 0x3, 0x2, 0xff}, 0xc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 11m2.125989338s ago: executing program 3 (id=1697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x4, 0x6, 0x8}, 0x10) symlink(0x0, 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x51, 0x21, 0xfd, 0x8, 0x4e8, 0xff30, 0xccbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x40, 0x0, 0x80, 0x15, [{{0x9, 0x4, 0xe3, 0x9, 0x2, 0xed, 0x6, 0xb8, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xb9, 0x4, 0x21}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0xe2, 0x6a, 0x8}}]}}]}}]}}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xffffffff}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @loopback}}) 11m0.66141996s ago: executing program 3 (id=1703): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r4, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa79}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed2", 0x13}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}, {0x0}], 0x6}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082dbd7000fddbdf254100000008000300", @ANYRES32=r6, @ANYBLOB="0c00080000000000000000000800a1000000000105001801250000000800220106020000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) 10m59.172757605s ago: executing program 3 (id=1711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000440)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5", @ANYRESHEX], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, r2}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0, 0x4000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000440)) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5", @ANYRESHEX], 0x0) (async) 10m55.863741813s ago: executing program 3 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000005c0001808600010000008cbe760b97dfae0908000600000000000000420303d3c796156e12cc0f7ab4b38f7ef06e3cbff5560bce146d54adbeb7909e854ae1d672cd99c14fd234b78ff41c62382486dcfe18c643726fc372b7abd7e37ab6d9ca82b6ccbff2b92f82245aa809d2f8c943857db45e3f6a9a3942e15dc003fa9065219d001ab033849697758cd917925b545a1a2254281a32e36ac87b5c4e78ee24270f34d6fda062b8022ba2d78589e8c592dfba2bfcc2b423afc0fecb"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000014000180050002000100c8da080006001a00"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount(&(0x7f00000002c0)=@filename='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x802001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000005c0001808600010000008cbe760b97dfae0908000600000000000000420303d3c796156e12cc0f7ab4b38f7ef06e3cbff5560bce146d54adbeb7909e854ae1d672cd99c14fd234b78ff41c62382486dcfe18c643726fc372b7abd7e37ab6d9ca82b6ccbff2b92f82245aa809d2f8c943857db45e3f6a9a3942e15dc003fa9065219d001ab033849697758cd917925b545a1a2254281a32e36ac87b5c4e78ee24270f34d6fda062b8022ba2d78589e8c592dfba2bfcc2b423afc0fecb"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000014000180050002000100c8da080006001a00"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) (async) mount(&(0x7f00000002c0)=@filename='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x802001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) (async) 10m55.721188301s ago: executing program 3 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) recvmsg$can_j1939(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0x3, @loopback, 0x7}}}, {&(0x7f0000000000)=""/207, 0xcf}, &(0x7f0000000100), 0x42}, 0xa0) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x0, 0x1, "84"}, 0x9) (async, rerun: 32) socket$caif_seqpacket(0x25, 0x5, 0x3) 10m55.380576057s ago: executing program 3 (id=1725): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x7883, 0x55a0, 0x1, 0x4, 0x9, 0x8000000000000000, 0xffff, 0x7, 0x2, 0x9, 0x0, 0x7, 0xffff, 0x4, 0x7ff, 0xa085, 0x8001, 0x81, 0x800, 0x8, 0xc2, 0x1ff, 0x9, 0x9, 0x8}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) iopl(0x3) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESHEX], 0x0) 10m55.256090125s ago: executing program 33 (id=1725): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x7883, 0x55a0, 0x1, 0x4, 0x9, 0x8000000000000000, 0xffff, 0x7, 0x2, 0x9, 0x0, 0x7, 0xffff, 0x4, 0x7ff, 0xa085, 0x8001, 0x81, 0x800, 0x8, 0xc2, 0x1ff, 0x9, 0x9, 0x8}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) iopl(0x3) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESHEX], 0x0) 6m53.731799425s ago: executing program 5 (id=3105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x70bdab, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}}}]}, 0x184}}, 0x20000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000063c0)="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", 0x641}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x20041000) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000019c0)=""/4091, 0xffb}], 0x1}, 0x12143) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x80, 0xd107, 0x8, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x65, 0x0, 0x73, 0x4, 0x0, @remote, @local, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x1c, 0xe9, 0x0, 0x8, [0xfffffff9, 0x4, 0x33c0, 0x3ff, 0x39a35eb3, 0xd]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x63}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x34004800) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) sendmmsg$inet6(r7, 0x0, 0x0, 0x20044000) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 6m53.731530681s ago: executing program 5 (id=3106): unshare(0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xfffff000) unshare(0x10100) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m53.482162826s ago: executing program 5 (id=3107): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000026"], 0x58) close(r0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000017c0)=""/4096) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000002c0)=0x3, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x71}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}], 0x3) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201eb02033dd608f80600b0a85d0102030109022400020908300609040509016b435f07090501"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000080000a00fc003a2a5e247b000000080004"], 0x24}], 0x1}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2=0xe0000001, {[@cipso={0x86, 0x6, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3e) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1d8ff20f20c5062424601020301090224000100041000090436"], 0x0) (async) syz_usb_connect(0x4, 0x2d6, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x7e, 0x3f, 0x80, 0x8, 0x12d1, 0x2770, 0x8dae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c4, 0x1, 0x4, 0x4, 0xc0, 0x5, [{{0x9, 0x4, 0x74, 0x10, 0x7, 0xff, 0x6, 0x32, 0x2, [@hid_hid={0x9, 0x21, 0xff, 0x8, 0x1, {0x22, 0xf5}}], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x9, 0x2c, 0x6, [@generic={0x2a, 0x11, "af3544e1d889cb17b4465249abe62c11c22de47b5bbdfcd1074fd3b082111dd1208ea33f1ae5a272"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x6, 0xba, [@generic={0x8e, 0x7, "eef71e0e35a637238250c9d9f8425af9894f404372c3da1efa1b92edbb68dc686bb1a5743bf180deb5d836f55a95e3e684f3b48c7f303416571ca71188334a4fce18d14735c1dc8e05f9ab6acc0d56c70d52fa4f4f88ad5a7b7e941826fac345470b8761c8d8156a87ed7d5d8579362b843315e6df8ab720a15eab68f5d45e9880090e64df53a0c26685aa62"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0xd, 0x96, 0x9, [@generic={0x90, 0x31, "0feb003e2f632aedce2178028f3eee53def3a7117e9688a527a75d503a951c59ca7755ae4bea50c0ce1154a51b20bbb32a8afe2968f2b136e9e0ea2dd8c8fd41a7b35d1e0cd179ac37bcc44a438a905c654cc52e56a82d3115d2362a07e15590785e6f1655b7b1ce3615f9a68ca1bafb7dd79b5b48d93535ab3ed078400142d10e1cc9425e11e91c6e4bb797ed0b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0xfb, 0x0, 0x7f}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x3, 0xde, 0x7f, [@generic={0xce, 0x31, "debc2ab4e669178ddc10a198d794d21da7997a4c081660d33a00b56a4570536216bee143c17da602f2f2c20c80d7b986256db4ac6b04c0f7e604fe9dbe0eaa8c7f9ae23503a2ca16f47dfb84627e5fd89a942a9d87bc10885a1d30bf5041a02ff17381abfaf099f4770d5351b2523503d4799195d43b43915e885c3a2489ef12a43d79da92d7a196308fa4f9f6cbb3d9875695d59247595be61d727510aa3b89aa34057e653be5793b5d379477ecb05193fafab3464e497f990d50822a2b52be00e38e2644263fb517f2e3cb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x1697ee5f66edf609, 0x28, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x496}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x8, 0x2, 0x8, [@generic={0x3f, 0x6, "cfe65c63e88cd9f993b8b489d4b4a5cd95e70635c7195ae026c04f92a95fa423de215c81e2ed8e654312b9ed1c28a50c230c15d79e045868350adb9a32"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3, 0x5, 0x7}, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f1c000210100a034e06210100000f0f81000f0000000710021c20"], 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2809}}]}) 6m53.356928477s ago: executing program 5 (id=3108): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="3b6773add2485f53272c6717c01f934a9e70e0d40de2f5a97a2dfbbf5dbefa78933a628f210fc4", 0x27}], 0x2) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="3b6773add2485f53272c6717c01f934a9e70e0d40de2f5a97a2dfbbf5dbefa78933a628f210fc4", 0x27}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00fe868200"/14], 0x0}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') recvmmsg$unix(r5, 0x0, 0x0, 0x40010000, 0x0) (async) recvmmsg$unix(r5, 0x0, 0x0, 0x40010000, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x4010, r1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) sendto$inet6(r1, &(0x7f0000000200)="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", 0xfa, 0x20004840, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x33}, 0x19}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000200)="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", 0xfa, 0x20004840, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x33}, 0x19}, 0x1c) 6m52.685052607s ago: executing program 5 (id=3109): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) write$FUSE_DIRENT(r2, 0x0, 0x40) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6ce, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) (async) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6ce, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c00)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d4, [{{0x9, 0x2, 0xfffffffffffffe56}}]}}, 0x0) (async) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d4, [{{0x9, 0x2, 0xfffffffffffffe56}}]}}, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r5) (async) syz_usb_disconnect(r5) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, 0x0, 0x0, 0x40, 0xf, &(0x7f0000000080)="55aba04b61424902d8534cba965f43"}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) memfd_create(0x0, 0x5) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x6a, {0x6a, 0xb, "530836ce2e6a98e6d818647074589442ad8a6accc6c8d536f1987b2353d9287c271a9e76b76c920150546f3a9c63d28dac98f4feecc546a3cbea413daa1c9a455e6b43709a3bd59e8961044352fe9fc45c153e43c5aec1b784e550f46cfacea79ee08b91f862d7d9"}}, &(0x7f0000000c80)=ANY=[@ANYBLOB="0003690000006903129565737ec50c54534ea2ca15bd5bb0b632f90ed2092bdb7351a05482b10c18f1816906f5ac1814b91ad840c2910e5412f706b652ecf4cfda004bc25bc1624967f069948d9613a662de2fc082957d30b89ff1cd511428dcb2a7f1caf992149771c0b72ca968c1b93b1248c4eeb8d1d8dea9bfa7ec0a9bc2471ec42e5793f4043632d391f4af78e92aee56afb8188e9221e4e3e5b4efab5b4767ffd40c9ed4b3b47146c925f3456ba2392febec44bbd5666de51429513f176164ff92dcd57a10b36bf7042b911f4f17c47ea9f780d18398053bd13dc86cd6e6db09af"], &(0x7f00000005c0)={0x0, 0xf, 0x11f, {0x5, 0xf, 0x11f, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xf8, 0x10, 0xb, "dcfc3d5780f32521adff8d8eca97224a7a20d7ebbb38542bdc85a5af18baac8fa0003c71b566317605bf08bda7717e4bb451bed5aabe51bd10df600bc53171349c8e3b948f55bf59ae2f084a738cf8f6691fe6cb29773645855d91e7a7f583b22fcd7b5e0e9a781b986cdd2cdd12dd34011bedd846294deb2f5a4a0b3dff254e7fb1136b5e4ec9dcee5d2142100892ff574d01459826eefdc2c5a4a9358a2fc38b712f9ef41fa8efe3b5c7fc49f15abeae088dc71d38fda3cb435222b02f67ba1ad51d096135c7e4b532fef7074650c4dbf39b01d2a92c6d04700253555ea65840af912f9b96b2b93f162e36c992fbe8f3a5a460e2"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x7, 0x1f24}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x4, 0x69}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xe, 0xfffb}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x4, 0x2, "c74a6649", "c128ed50"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0xd, 0x6, 0x1, 0xbef, 0xffff}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x86, "c3cf5918e2b822ed4cca06276af1d6edeea567859464aa834d1a41aa6c66eac41ad706bce583e9397ccefd71deecfb8c09bbfdd080d33413666c853bda33082d49a725f55e2d1f80ffd59aec6828244efabaade66e61251c74e0915f90040307b76da4710822f9745b17935c614a82ae948a8b09d2a9ea923e23d2a38dfd65e87db51fd72cbb"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f0000000c40)=ANY=[@ANYBLOB="20000800002c008000200010f10000"], &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7fc5}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0xb, 0x2, "0114"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4f0}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a9d7"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x714e}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x5f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x6a, {0x6a, 0xb, "530836ce2e6a98e6d818647074589442ad8a6accc6c8d536f1987b2353d9287c271a9e76b76c920150546f3a9c63d28dac98f4feecc546a3cbea413daa1c9a455e6b43709a3bd59e8961044352fe9fc45c153e43c5aec1b784e550f46cfacea79ee08b91f862d7d9"}}, &(0x7f0000000c80)=ANY=[@ANYBLOB="0003690000006903129565737ec50c54534ea2ca15bd5bb0b632f90ed2092bdb7351a05482b10c18f1816906f5ac1814b91ad840c2910e5412f706b652ecf4cfda004bc25bc1624967f069948d9613a662de2fc082957d30b89ff1cd511428dcb2a7f1caf992149771c0b72ca968c1b93b1248c4eeb8d1d8dea9bfa7ec0a9bc2471ec42e5793f4043632d391f4af78e92aee56afb8188e9221e4e3e5b4efab5b4767ffd40c9ed4b3b47146c925f3456ba2392febec44bbd5666de51429513f176164ff92dcd57a10b36bf7042b911f4f17c47ea9f780d18398053bd13dc86cd6e6db09af"], &(0x7f00000005c0)={0x0, 0xf, 0x11f, {0x5, 0xf, 0x11f, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xf8, 0x10, 0xb, "dcfc3d5780f32521adff8d8eca97224a7a20d7ebbb38542bdc85a5af18baac8fa0003c71b566317605bf08bda7717e4bb451bed5aabe51bd10df600bc53171349c8e3b948f55bf59ae2f084a738cf8f6691fe6cb29773645855d91e7a7f583b22fcd7b5e0e9a781b986cdd2cdd12dd34011bedd846294deb2f5a4a0b3dff254e7fb1136b5e4ec9dcee5d2142100892ff574d01459826eefdc2c5a4a9358a2fc38b712f9ef41fa8efe3b5c7fc49f15abeae088dc71d38fda3cb435222b02f67ba1ad51d096135c7e4b532fef7074650c4dbf39b01d2a92c6d04700253555ea65840af912f9b96b2b93f162e36c992fbe8f3a5a460e2"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x7, 0x1f24}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x4, 0x69}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xe, 0xfffb}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x4, 0x2, "c74a6649", "c128ed50"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0xd, 0x6, 0x1, 0xbef, 0xffff}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x86, "c3cf5918e2b822ed4cca06276af1d6edeea567859464aa834d1a41aa6c66eac41ad706bce583e9397ccefd71deecfb8c09bbfdd080d33413666c853bda33082d49a725f55e2d1f80ffd59aec6828244efabaade66e61251c74e0915f90040307b76da4710822f9745b17935c614a82ae948a8b09d2a9ea923e23d2a38dfd65e87db51fd72cbb"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f0000000c40)=ANY=[@ANYBLOB="20000800002c008000200010f10000"], &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7fc5}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0xb, 0x2, "0114"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4f0}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a9d7"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x714e}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x5f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x2}}) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) 6m52.399390504s ago: executing program 5 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x9, @pix_mp}) (async) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 6m52.173643293s ago: executing program 34 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x9, @pix_mp}) (async) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae8000000000a01010000000000000000050000000900010073797a3000000000ba000600e9eec003775c64e64f439fc0b5fb34bcd039590bba579a25436e11f718b64e3e01796b9e930a3d8eefa0bccf8429a311f3ce5ec5a0a7bb9e08c60e03cbcdd726725fb9b1bd1000cf2a77ab6ab91f2294632773ea59b8de2361cdd8045c5fdb81611e843cb814e4cfe672542287ebd3b2ed48dca1a08690b05bb9bbbcc05551bd05e4c6e0625fcae04323e0f29dbad3c57456d2ca020462188e1236ebe6da1442c71ab0a8ebfaacef2710111417370a0f8cd19c5f9e1a00000900010073797a300000000014010000030a01030000000000000000050000000900010073797a30000000000800054000000000af000c008451bef8928cf9ec5c3c0fca5cedf6b9ae811484cd4abbaec9eba3118a64f7b105ab0e5c8e377ddaf98490703415da6a50c72a1434c93ef4daa32cd2b643c4ab99e8adc29f67b58cd27b71b30213e6acd60b8fa2190c3fd64f382e41b97f4b12379ce9470cbfdb02cc2a2d8e0e7aec144e2df705b37b99cafc9b141b0f3176897eba9802e14cc423ecff994b4ff320f5786bd4fba343449446d922b94ac3f8621197db4c2dc061e9278f5a000900030073797a32000000000b00070066696c746572000024000480080002406b10a6210800014000000004080002404e73b858080001400000000014000000020a030000000000000000000500000014000000110001"], 0x238}}, 0x0) 4m23.747109151s ago: executing program 6 (id=3547): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000009c0)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (rerun: 32) 4m23.593771624s ago: executing program 6 (id=3548): r0 = socket$key(0xf, 0x3, 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f00000000c0)={0x1, "354fa81593b33becdb3b917a4b2cabb6df3e9e30c13f8dbdc5ba2fddcc4de8a0d07bb4f589e48571e41f5f466cefda7c6ab0b3b2eb8a7d3164e13acce4d8cefe", {0x7, 0x9}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x5, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m23.592023473s ago: executing program 6 (id=3549): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180)=0x17fffffe, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0xff}) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0xfd, 0x6e, 0x40, 0xace, 0x2011, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x0, 0x80, 0x1, [{{0x9, 0x4, 0x82, 0x6, 0x0, 0x7e, 0x5, 0xdb, 0x3}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0xab, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x2, 0x1, 0x8, 0x60, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "bf"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x8000, 0x5}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x9e8d, 0x5, 0x31, 0x4, 0x4, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x7, [0xfff8, 0x5, 0x54c, 0x8001, 0x3, 0x3]}, @obex={0x5, 0x24, 0x15, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xff23, 0x4, 0x3}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x401, 0x4, 0x6, 0xe988, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x3, 0x4f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x65, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x3, 0x95}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xfc, 0x5, 0x9, 0x20, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x843}}, {0x83, &(0x7f00000001c0)=@string={0x83, 0x3, "e843b1b51ff7c76342c1b82c1645a67ae8772b298bd0c35a6d5c503cce66158ae9725e7b49c99a7c6542ca35871dc16caf966245b4dce13ddcfd1c14d25850a91cbbf68dc17eb2aafd74c3e79d32dc111a8f58f3d9cd25e30b534545a7f7efe9c6b60078aafab3e7b2c3ec8e1fe60ab9d3b64a77bbdfc0b19c2cc9b3d4634089aa"}}, {0x37, &(0x7f0000000280)=@string={0x37, 0x3, "2c2567320d9af163f2f074e3a7f3785c9321568b96775e0f0d70479059b2b67c5509a3ab1b16775b3e4fbb93e8438ad8b2ff8af95e"}}]}) 4m20.321727398s ago: executing program 6 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000300)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/71, 0x47, 0x4100, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x294000, 0x131) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r4, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) unshare(0x8000000) sendto$unix(r4, &(0x7f0000000140)="4f4dde9330241420a81f6b6d2e65e09e92dcf06c789d2928f5b03599ef4562bae250608c685b6264d9c082dfd6e7c967fe80b707a60be74883afa6570725232e3fbdfa28440b926cfaa45adb49444c41862a4a1ef85873e0c67936bd061f6e446c9295a40591242bec", 0x69, 0x8800, &(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e) 4m19.434719809s ago: executing program 6 (id=3563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000000c0)={0x3, 0x2}) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x8000) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @rand_addr=0x64010102}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x32, {0x2, 0x4e24, @broadcast}, 'veth1\x00'}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff, 0x2, 0x3, 0x2, 0x2, 0x5}, 0x20) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000003}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x4044841}, 0x0) 4m19.175544307s ago: executing program 6 (id=3566): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) 4m18.998280993s ago: executing program 35 (id=3566): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) 3m32.557432942s ago: executing program 7 (id=3780): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) setreuid(0xee01, 0x0) (async) setuid(0x0) munlockall() (async) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x24001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000053d000/0x1000)=nil, 0x1000, 0x1, 0x810, r2, 0x0) (async) r3 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) munlockall() (async) munlockall() (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) (async) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_open_procfs(r3, &(0x7f0000000100)='net/rfcomm\x00') r6 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="9c", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000240)="9f", 0x1}) (async) close(r6) 3m32.555131325s ago: executing program 7 (id=3781): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa101020301090212000100000000090400"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa101020301090212000100000000090400"], 0x0) (async) 3m31.986564541s ago: executing program 7 (id=3783): r0 = socket(0x2, 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$cgroup_ro(r4, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 3m31.86579864s ago: executing program 7 (id=3784): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) accept4$tipc(r0, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x1000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x6, 0x1}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) write$vga_arbiter(r6, &(0x7f0000000040), 0xf) mount(&(0x7f0000000080)=@filename='./cgroup/file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x208004, 0x0) 3m31.827701344s ago: executing program 7 (id=3785): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000102, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x32315659, 0x2, @stepwise={0xbf1, 0x401, 0x100000, 0x3, 0x3, 0x27b7}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000112000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r2, 0x10000000) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x50, 0x0, r2, 0x0, r4}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, r5, 0xa9525000) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x13, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) 3m30.821688443s ago: executing program 7 (id=3787): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddd0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r4, &(0x7f00000000c0)='./file0\x00') r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r6, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) 3m14.356552074s ago: executing program 36 (id=3787): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddd0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r4, &(0x7f00000000c0)='./file0\x00') r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r6, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) 1m10.323350734s ago: executing program 2 (id=4468): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000), 0x0, 0x0, 0x1) close(0x3) 1m10.264097929s ago: executing program 2 (id=4469): r0 = socket(0x10, 0x803, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) fcntl$lock(r1, 0x25, &(0x7f0000000740)={0x2, 0x2, 0x8, 0xfffffffffffffffe}) sendto(r0, &(0x7f0000000480)="120000001200e7ef007b00000000000000a1b95f53", 0x15, 0x84, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8e810) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0xcd, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x2}}, 0x18) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000000c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/17, 0x11}], 0x8, &(0x7f00000004c0)=""/200, 0xc8, 0xa1}}], 0x40000dc, 0x42042000, &(0x7f0000003700)={0x77359400}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x4) 1m10.16257437s ago: executing program 2 (id=4470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000001f80)=@vmx={0x8, 0x0, 0x2080, {0xfec74000, 0x7000, {0x2}, 0x0, 0x3}, {"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", "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"}}) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r9, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'dvmrp1\x00', @random="69c1353102b5"}) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) pwritev2(r11, 0x0, 0x0, 0xfff, 0x2, 0xa) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x82040, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="1f0e838fa3375a119ade1f8d0cff54c82aa5c86df36be14985c53be63a750b56de61b9a027391131cd818ba0ad1f60e002b768942ceba53487124fb6cf6b585f1821b8b781e54a5cf76875e3c498e62a09438bbe474b51c62040c134d0a5db306c4a681c22b4b0038452eec9bc04793cbb48289d66466af0b4c1"], 0xa) 1m9.857244426s ago: executing program 2 (id=4471): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x4, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0xa, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, r3}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0x5, 0x8251c, 0x5, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c020905a102", @ANYRESHEX], 0x0) landlock_restrict_self(r0, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x40400, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00009ee000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c15000/0x3000)=nil, &(0x7f0000b75000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="ee", 0x1, r0}, 0x68) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x44010) 1m6.562603991s ago: executing program 2 (id=4478): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x541b, &(0x7f0000000380)=0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20008891}, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000700)=""/226, 0xe2}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/161, 0xa1}], 0x7}, 0x22120) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000005c0)={0x6, "baa649687f755ceb94f74692d47383c43950a827ed274ece31ed62548b650ff5615cd4f8a0a9ad71625f35ad43a5d3fea500b01baace66bd8771c1c4d6e94bb9da3174e646841e90c54772bdba2d0c6f9dcdaa9168716447e883317c1c11326cc09cc708ef5fa8292aff2382c8a4592781a46e15284c4b37c7b21e3a6ec97cc33ab5e2f23dc774690fc9f69b23836fb006f739789c9c325e80ac2547b2f12ec806a8a00b82ee8a746352a5418d084e88824855202e22c4482b94a264f1cef8ec658cb7fc4a3fac283157e105e2f4bf4ed2e1ab7761445b030bbcb6fe82497414f8363147892f9f222875d7303e53eda0b8f2f5f942f551f11e3727eae6a5832da8c65ab819ff7443968d66faa048c486db0182fe2d3be5a33a04a9d40d304e7fcc0d86be13c52bb1cd2660507e056db6424211ac14e1deceae3f06aac3e0ff5d780fda5a8dfcd59beaa2afeaa093e82c85633af9725e82bae9ec9d2f193074dc3cbb3a804cd86f4d64ab6dc9bea33989cf4f81af43ec8abb3257061d0cd2058508788ecc203fb3e9ac812bdbc7bedc92b427ddac27b3baf430fdbb31ce731c9bcefb2acfac8ec66372c17642e26edef6ae02655d9c7b016fbcd8bfa2e7b7d787d6bb0bd18febff0ca9941b217170f838e6b753a85572aa3fc362679870e7db9a38856361ce0ce7ac7a86b9828b24354e57fd53371bbb0e6db379d9ed8a33c502"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1, 0x0, 0x40000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000002c0)={0xc7, 0xfdfd, 0x1}) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=ANY=[@ANYBLOB="88a9bc005c02110400010802110000015050ae5751e33400b204800880c0cc812fda98bb9cf928671a4fc8c47c10043f014952ef19d4", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r1], 0x1e) 1m5.721371793s ago: executing program 2 (id=4479): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x402) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x7, 0xfffffffffffffffd, 0x0, 0xffff, 0x1, 0x4002004c3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffffd], 0x30000, 0x2011c0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8040640a, &(0x7f00000000c0)={0x1, 0x30000, 0x0, 0x6, 0x2, 0x800006, 0x40, 0x6, 0x80, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0}) 1m5.42344415s ago: executing program 37 (id=4479): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x402) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x7, 0xfffffffffffffffd, 0x0, 0xffff, 0x1, 0x4002004c3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffffd], 0x30000, 0x2011c0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8040640a, &(0x7f00000000c0)={0x1, 0x30000, 0x0, 0x6, 0x2, 0x800006, 0x40, 0x6, 0x80, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0}) 1m2.525304198s ago: executing program 8 (id=4486): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xe, 0x0, 0x80b}}}, 0x7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@rose, @null, @netrom, @default, @remote, @netrom, @default, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x204c3, 0x0) recvfrom$ax25(r1, &(0x7f0000000140)=""/36, 0x24, 0x10000, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r2, 0x6, 0x6, 0x4}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x4, 0x4, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200a}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) getsockopt(r0, 0x1, 0x10, &(0x7f00000005c0)=""/53, &(0x7f0000000600)=0x35) write$P9_RREADDIR(r1, &(0x7f0000000640)={0x49, 0x29, 0x2, {0x2, [{{0x4, 0x4}, 0x5, 0x8, 0x7, './file0'}, {{0x0, 0x3, 0x3}, 0x8, 0x2, 0x7, './file0'}]}}, 0x49) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={r2, 0x2, 0x2, 0x10, 0x5, 0x1, 0x1cf, 0xa1d9, {r2, @in6={{0xa, 0x4e21, 0x0, @remote, 0x400}}, 0x200, 0xf, 0x5, 0x94, 0x40}}, &(0x7f0000000780)=0xb0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000c40)={0x10202, 0x0, 0x240, &(0x7f0000000840)=[0xa6, 0x9, 0x2, 0x5, 0x6, 0x7ff, 0x1c9, 0xb, 0xc4, 0x6, 0x5d5c, 0x9, 0x8, 0x8, 0x800, 0x7, 0xf9, 0x9, 0xfff, 0x0, 0x3, 0x654e, 0x1, 0x9, 0x5, 0x3, 0x7ff, 0xde, 0x8, 0x1, 0x6, 0x6, 0x8000, 0x0, 0x100, 0x0, 0xc80b, 0x4b7d2b9e, 0xd0, 0x6, 0x1, 0x100, 0x6, 0x6, 0xae, 0x14, 0x6, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x3, 0xc, 0x8, 0x10000, 0xc5, 0x401, 0x9e08, 0x7, 0x1, 0x1, 0xc, 0x4, 0x48, 0x43a8, 0x0, 0x0, 0x35cd, 0x7fffffff, 0x8, 0x0, 0x5, 0x100000000, 0x0, 0x0, 0x9, 0x73f7a9b, 0x3, 0xbf, 0xb76, 0xa, 0x0, 0x7, 0x4, 0x0, 0x9, 0x32da, 0x9, 0x2, 0x2, 0x10000, 0x2dd, 0x3cd9fcc0, 0xb96, 0xfffffffffffffffa, 0xffffffffffffffb2, 0x8, 0x5, 0xfe00000000000000, 0x3, 0x7d3, 0x7, 0x8001, 0x9, 0x1ff, 0x100000000, 0x4, 0x3, 0xdd3, 0x3, 0x2, 0x9, 0xe, 0x4, 0x9, 0x81, 0xfffffffffffffffa, 0x3, 0x81, 0x1, 0x200, 0x8645, 0x101, 0x2, 0x1000, 0xfffffffffffffffe]}) 1m2.475604902s ago: executing program 8 (id=4487): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x12) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000640)=""/4096, &(0x7f0000000000)=0x1000) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, 0x6}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x0, 0x0, 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) r5 = socket$inet6(0xa, 0x3, 0x20000) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38414761}}) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000340)) 1m2.307097639s ago: executing program 8 (id=4488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) socket(0x1d, 0x4, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) 1m1.868541249s ago: executing program 8 (id=4490): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x10400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x3b, 0x427846b5da991c3a) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 1m1.728823928s ago: executing program 8 (id=4492): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x1fe, 0x81}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x541a, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464d2, &(0x7f0000000080)={r4}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000100)='/dev/dri/card#\x00', 0x4802, &(0x7f0000000140)={@align=0x8, {0x80, 0xf680, 0x1e38, 0x2}}, 0x9, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x6c}) sendfile(r2, r1, 0x0, 0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000000280)) r7 = openat$cgroup_ro(r2, &(0x7f0000000500)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000740)={0x0, "1da5dedb234a485fd39b004f2fc9fa027aa97aacb021465036468e22b36af5315371df38683504e2f31ac12dd0f6952b2cdbc04de2ec138175b280219d3983a4", {0x7ff, 0x1}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x7, 0x4}) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48b9, &(0x7f00000002c0)={0x0, 0xfffffffb, 0x20, 0x3, 0x21c}, &(0x7f0000000080), &(0x7f0000ff4000)) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000d1b000/0x1000)=nil, 0x1000}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000540)={0x0, r8, 0x101, 0x8, 0xffffffff, 0x98e, 0x1}) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)="98", 0x1}, {&(0x7f0000000580)="122e", 0x2}, {&(0x7f00000005c0)="6a4212f1dee8a75c76c43d3572ea7104ef47b69a993ea3618a07e79eadb6b21e03379403e919b47c88405fdfccac01496144b604f18932a78712b711781b5d5b0fc2872aeca83839fa5393cbc11754c2ac588e17a26ca2165302229c29aaee25ac12415fb8784ee495335851df85fc288c0c0d722ae13c497dc03aa7230c67041ef6e00826308b4c380b5f120c43af93d4efef3fb79b08e2721de9c9670e739c0493ade524f6af3a4a2b0453114e66290647aa6d3c5480d7bdeff69558eff4182f9e8c73013868324be664d4aa35344501afa1f4a4f2c25bfe0585a6bced1f8bbc0e68b1c051d5c0521b79b5", 0xec}, {&(0x7f00000006c0)="9e6d3fba7fcd91fef420c5854853695cedd6b9d186a85d566b9184b4c02f9ddad5228071b6ee610ece850b3f0c39bb9d8e76b02411cfd9", 0x37}], 0x4}}], 0x1, 0x4000040) 1m0.749458805s ago: executing program 8 (id=4494): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xe, 0x0, 0x80b}}}, 0x7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@rose, @null, @netrom, @default, @remote, @netrom, @default, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x204c3, 0x0) recvfrom$ax25(r1, &(0x7f0000000140)=""/36, 0x24, 0x10000, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r2, 0x6, 0x6, 0x4}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x4, 0x4, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200a}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) getsockopt(r0, 0x1, 0x10, &(0x7f00000005c0)=""/53, &(0x7f0000000600)=0x35) write$P9_RREADDIR(r1, &(0x7f0000000640)={0x49, 0x29, 0x2, {0x2, [{{0x4, 0x4}, 0x5, 0x8, 0x7, './file0'}, {{0x0, 0x3, 0x3}, 0x8, 0x2, 0x7, './file0'}]}}, 0x49) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={r2, 0x2, 0x2, 0x10, 0x5, 0x1, 0x1cf, 0xa1d9, {r2, @in6={{0xa, 0x4e21, 0x0, @remote, 0x400}}, 0x200, 0xf, 0x5, 0x94, 0x40}}, &(0x7f0000000780)=0xb0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000c40)={0x10202, 0x0, 0x240, &(0x7f0000000840)=[0xa6, 0x9, 0x2, 0x5, 0x6, 0x7ff, 0x1c9, 0xb, 0xc4, 0x6, 0x5d5c, 0x9, 0x8, 0x8, 0x800, 0x7, 0xf9, 0x9, 0xfff, 0x0, 0x3, 0x654e, 0x1, 0x9, 0x5, 0x3, 0x7ff, 0xde, 0x8, 0x1, 0x6, 0x6, 0x8000, 0x0, 0x100, 0x0, 0xc80b, 0x4b7d2b9e, 0xd0, 0x6, 0x1, 0x100, 0x6, 0x6, 0xae, 0x14, 0x6, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x3, 0xc, 0x8, 0x10000, 0xc5, 0x401, 0x9e08, 0x7, 0x1, 0x1, 0xc, 0x4, 0x48, 0x43a8, 0x0, 0x0, 0x35cd, 0x7fffffff, 0x8, 0x0, 0x5, 0x100000000, 0x0, 0x0, 0x9, 0x73f7a9b, 0x3, 0xbf, 0xb76, 0xa, 0x0, 0x7, 0x4, 0x0, 0x9, 0x32da, 0x9, 0x2, 0x2, 0x10000, 0x2dd, 0x3cd9fcc0, 0xb96, 0xfffffffffffffffa, 0xffffffffffffffb2, 0x8, 0x5, 0xfe00000000000000, 0x3, 0x7d3, 0x7, 0x8001, 0x9, 0x1ff, 0x100000000, 0x4, 0x3, 0xdd3, 0x3, 0x2, 0x9, 0xe, 0x4, 0x9, 0x81, 0xfffffffffffffffa, 0x3, 0x81, 0x1, 0x200, 0x8645, 0x101, 0x2, 0x1000, 0xfffffffffffffffe]}) 44.605137524s ago: executing program 38 (id=4494): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xe, 0x0, 0x80b}}}, 0x7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@rose, @null, @netrom, @default, @remote, @netrom, @default, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x204c3, 0x0) recvfrom$ax25(r1, &(0x7f0000000140)=""/36, 0x24, 0x10000, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r2, 0x6, 0x6, 0x4}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x4, 0x4, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200a}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) getsockopt(r0, 0x1, 0x10, &(0x7f00000005c0)=""/53, &(0x7f0000000600)=0x35) write$P9_RREADDIR(r1, &(0x7f0000000640)={0x49, 0x29, 0x2, {0x2, [{{0x4, 0x4}, 0x5, 0x8, 0x7, './file0'}, {{0x0, 0x3, 0x3}, 0x8, 0x2, 0x7, './file0'}]}}, 0x49) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={r2, 0x2, 0x2, 0x10, 0x5, 0x1, 0x1cf, 0xa1d9, {r2, @in6={{0xa, 0x4e21, 0x0, @remote, 0x400}}, 0x200, 0xf, 0x5, 0x94, 0x40}}, &(0x7f0000000780)=0xb0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000c40)={0x10202, 0x0, 0x240, &(0x7f0000000840)=[0xa6, 0x9, 0x2, 0x5, 0x6, 0x7ff, 0x1c9, 0xb, 0xc4, 0x6, 0x5d5c, 0x9, 0x8, 0x8, 0x800, 0x7, 0xf9, 0x9, 0xfff, 0x0, 0x3, 0x654e, 0x1, 0x9, 0x5, 0x3, 0x7ff, 0xde, 0x8, 0x1, 0x6, 0x6, 0x8000, 0x0, 0x100, 0x0, 0xc80b, 0x4b7d2b9e, 0xd0, 0x6, 0x1, 0x100, 0x6, 0x6, 0xae, 0x14, 0x6, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x3, 0xc, 0x8, 0x10000, 0xc5, 0x401, 0x9e08, 0x7, 0x1, 0x1, 0xc, 0x4, 0x48, 0x43a8, 0x0, 0x0, 0x35cd, 0x7fffffff, 0x8, 0x0, 0x5, 0x100000000, 0x0, 0x0, 0x9, 0x73f7a9b, 0x3, 0xbf, 0xb76, 0xa, 0x0, 0x7, 0x4, 0x0, 0x9, 0x32da, 0x9, 0x2, 0x2, 0x10000, 0x2dd, 0x3cd9fcc0, 0xb96, 0xfffffffffffffffa, 0xffffffffffffffb2, 0x8, 0x5, 0xfe00000000000000, 0x3, 0x7d3, 0x7, 0x8001, 0x9, 0x1ff, 0x100000000, 0x4, 0x3, 0xdd3, 0x3, 0x2, 0x9, 0xe, 0x4, 0x9, 0x81, 0xfffffffffffffffa, 0x3, 0x81, 0x1, 0x200, 0x8645, 0x101, 0x2, 0x1000, 0xfffffffffffffffe]}) 8.447542724s ago: executing program 4 (id=4754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x41}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)='3', 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(0xffffffffffffffff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = dup(r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, r4, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000140)={0x8, 0x20, 0x0, 0x20, 0xfffffffffffffffe}, 0x48) 7.461006035s ago: executing program 4 (id=4759): munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') syslog(0x2, &(0x7f0000001800)=""/50, 0x32) unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) syz_usbip_server_init(0x4) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x9, 0x4, "250a8f41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 4.151934924s ago: executing program 4 (id=4782): mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x1b5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x42002, 0x0) (rerun: 64) clock_gettime(0x0, &(0x7f0000000040)) ppoll(&(0x7f0000000100)=[{r0, 0x313}, {r1}], 0x2, &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@appraise}, {@obj_type={'obj_type', 0x3d, '['}}, {@smackfsdef={'smackfsdef', 0x3d, 'measure'}}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'lowerdir\x1e\xbe\xca\xc4\x9c?\xb7\xa8\xfa\v\x7f\xf9\x8a+8\xcf?\xc1pB\xc3u\rZgm\x98\vj\xdaqE\x89k\xfb\xbb\x8c\x96\x1d\"[\xd4\x9a\x9c0\xa9b$n\xf4\x03\v\xc8\xff\xe5\xd3!\xf8\x91\x90 \xcf\xafo|;\xf9\x80NP\xf2T\x82J\xc5K\x96N\xcb\x13\x96\x99?P\x8d'}}, {@subj_type={'subj_type', 0x3d, '/dev/dri/card#\x00'}}, {@smackfsfloor}, {@measure}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000003c0)={&(0x7f0000000700)=[{0x0, 0x1601, 0x67, &(0x7f0000000200)="475bbe654338e920c16907578518c8e162266a78ebfd5d371000052b4478daec1aea0deb7b031d6801b7b321e97f9a50e40cf8b414ea3b497de7695428ba42b9b0c9c9a091cce1ed2ccd6f68d3882506d4a62e63c86c7131def01302ee3cdf1e8cc0547d74a5d5"}, {0x0, 0x0, 0x0, 0x0}], 0x2}) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x18) symlinkat(&(0x7f0000000080)='.\x00', r3, &(0x7f0000000200)='./file0\x00') 4.085290162s ago: executing program 4 (id=4784): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8, 0x0, @remote, 0x4}, 0x1c) (async) ioperm(0x2, 0x4, 0x2) (async) ioperm(0x1, 0x7f, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402060602"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 3.968650356s ago: executing program 4 (id=4786): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r1, 0x7fffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="0281", 0x2}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @empty}}}}]}]}, 0x6c}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c9070102030109022400010100100009041302a3f0f004f7e110f6a3d5a102836716000905040200024d18b1856ef4642396a7da9631cc61f13772cb25b175329b95ed1594fed65a6b516d57a9568e78230aa4731b6ae8138d61376788c2503bb08210ee604116fab106f230e52d23b5c8a040f9f6891e88b3fff4b60ebde906215c9e21acab066126112b0cabff083e2fbf40a90000000000000000"], 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x8000000) 3.511295665s ago: executing program 0 (id=4796): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000452000/0x3000)=nil, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x200000000000004d, 0x3, 0xfffffffffffffffc, 0x5, 0x5, 0x1, 0x1000, 0x100000877, 0x9, 0x2000002, 0xfffffffffffffffd, 0xb, 0x5, 0xb777, 0x2, 0x3], 0xe000, 0x222884}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x200000000000004d, 0x3, 0xfffffffffffffffc, 0x5, 0x5, 0x1, 0x1000, 0x100000877, 0x9, 0x2000002, 0xfffffffffffffffd, 0xb, 0x5, 0xb777, 0x2, 0x3], 0xe000, 0x222884}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/uevent_helper', 0x50002, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/uevent_helper', 0x50002, 0x0) preadv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f00000008c0)=""/206, 0xce}, {&(0x7f00000009c0)=""/159, 0x9f}, {&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/86, 0x56}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/199, 0xc7}], 0x7, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80000, 0xffff) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0xb}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @multicast1, 0x4, 0x1}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 0x4, 0xa, {@mac=@link_local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x8, 0x7, 0x1, 0x580, 0x4006, 0x80, 'bond_slave_1\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x2e}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @multicast1, 0x4, 0x1}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 0x4, 0xa, {@mac=@link_local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x8, 0x7, 0x1, 0x580, 0x4006, 0x80, 'bond_slave_1\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x2e}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r4 = syz_clone(0x20052900, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x202599ca) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000200)=0x8, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000200)=0x8, 0x4) recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000000, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0xc, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x2000000000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915c", 0x1e}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000880)={0x84, @local, 0x15, 0x3, 'rr\x00', 0x28, 0x5, 0x74}, 0x8c) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x2801) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x2801) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x10000, 0x6, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x10000, 0x6, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) accept4(r5, 0x0, 0x0, 0x800) 3.417355739s ago: executing program 0 (id=4798): socket$nl_route(0x10, 0x3, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) 3.391456935s ago: executing program 0 (id=4799): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = userfaultfd(0x80801) socket(0x2, 0xa, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x190}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000026000/0x2000)=nil, 0x2000}, 0x4}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000940)='./file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x1, {0x7, 0x1, 0x0, {0x6, 0x69f, 0x0, 0xe4, 0x2d89, 0xadb, 0x40, 0x81, 0xa2d, 0x1000, 0x2c6, r6, r7, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') 2.945500783s ago: executing program 1 (id=4800): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x10100, 0x0) ioperm(0xc614, 0x80000000, 0x0) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0xfffffffffffffe69) socket$inet_udplite(0x2, 0x2, 0x88) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) (async) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x10100, 0x0) (async) ioperm(0xc614, 0x80000000, 0x0) (async) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0xfffffffffffffe69) (async) 2.939916474s ago: executing program 1 (id=4801): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x31) 2.496805105s ago: executing program 0 (id=4802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x300, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 2.441059093s ago: executing program 0 (id=4803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xb}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4041) 2.3656882s ago: executing program 0 (id=4804): capset(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capget(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)={0xc9, 0xffff, 0x400, 0x1ff, 0xc5, 0x7}) syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406072551"], 0x0) 2.029729113s ago: executing program 9 (id=4807): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x4, 0x12) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xeb) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000140)={0x0, 0x1, 0x87, 0x7}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r6) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 2.022746417s ago: executing program 9 (id=4808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000200)="a3d605a93b0400000000000000", 0xd}, {&(0x7f0000000240)="b4cbfd3d54e98bf7ea84b53e65f7abf5c63edb9f", 0x14}], 0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000001300)=""/4118, 0x1016, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) readv(r8, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/123, 0x7b}], 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x3, 0x0, 0xa, 0x3}}, 0x2e) r9 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x4e21, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x5, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3503, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0xb6}], 0x1) 1.016314738s ago: executing program 9 (id=4809): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x2, 0x3}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x4, 0xb0, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x4, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x5, 0x7, {0x7, 0x25, 0x1, 0x82, 0x80, 0xb08b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xa3, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x8, 0x80, "11"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x8, "d7dc7b"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe, 0x3, 0x8, 0x1, "0444eb4c96"}, @as_header={0x7, 0x24, 0x1, 0x7, 0xa4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf9, 0x4, 0x8, {0x7, 0x25, 0x1, 0x81, 0x1, 0x9}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xd5, 0xb, 0x2d, 0x8, 0x7}, 0x2e, &(0x7f00000000c0)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xfe, 0x1, 0x4, 0xc0}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0e26e74362b5f8239a3e5a4a513e1df8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x2, 0xe4}]}, 0x3, [{0xb3, &(0x7f0000000240)=@string={0xb3, 0x3, "8a14739929b777c5354894cc34a409ab0f91f582e9508210e70adc1c014480768396d026a48c502e9c6dbf3c8f8c500a6e49e6ddb41a12733d7fe63456424e0117bf3c8e7e6baf2aeaba0e9c40bd3741821ffdf41f1d477ccd02a7fcafbd00ad615a712dbed7b09ce94bfff5fbdb2ec8d6d8f054dc3557ad6be4571f1684e9322fc19bb7c420dab32c56b8af686c52c37383f956c499ee9251ae4b7b64b204aa27ee52c11c41122f33989c139bf7ccb64e"}}, {0x46, &(0x7f0000000380)=@string={0x46, 0x3, "633e1f23554b089b00dbefe66dba563f20ee17ade024505ba7d4d33be3956ecbfcb099fb551b18919bf595d58703d7ba186f09d6e1c2ba4510dfdc1e2a19f37444518019"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x449}}]}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x40084) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 665.600204ms ago: executing program 4 (id=4810): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xd5, 0xaf, 0x96, 0x40, 0x61d, 0xc180, 0x6617, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3f, 0x10, 0x1, [{{0x9, 0x4, 0x91, 0xc8, 0x0, 0x54, 0x2b, 0x17, 0x82}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 646.010627ms ago: executing program 1 (id=4811): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000900), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000001200)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)={0x1, 0x0, [{0x80000001, 0x5, 0x5, 0xa, 0x8, 0xa3, 0xce9}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r8) r9 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r9, &(0x7f0000000140)="69672505bde5d1853a384e3deec6fcb4391f745de504000000feffffff7090ba2b6d59c8958d6f1500000000c4677b000900ffffffffffffff200000f8bf54da331979df33226e02beb8bfb7cdb52558975e1e63c58d102c0c44078fd75aec49abbfbdb321b8295ace420dedadc04517519701ffa77f075b414ab13859241289d3506b9e5c", 0x85) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1d) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f0000000100)={0x3, 0x2}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000080)="0f8bebab0000f30f591b0f0f3501000000bf0f01d1de4600b91b0300000f3265660f188cc384c400000f01cf66b8f0000f00d066b8a5000f00d8", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 437.803478ms ago: executing program 1 (id=4812): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44851}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0xffffffffffffff07, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xfffffffb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="dbbf000000000000000004"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff50e}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) pipe2$9p(&(0x7f0000000000), 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 377.690848ms ago: executing program 9 (id=4813): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000140)={0x9, 0x20000000, 0x400, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xd50}}], 0x400000000000181, 0x9200000000000000) close(r4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000240)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0xa8}}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0xffffffffffffffff}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs2\x00'}}, {@hash}, {@dont_measure}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs2/binder0\x00'}}, {@appraise}, {@fowner_eq={'fowner', 0x3d, r5}}]}) 329.596691ms ago: executing program 1 (id=4814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async, rerun: 32) chdir(&(0x7f0000000340)='./file0\x00') (async, rerun: 32) r1 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r1, 0x0, 0x0) (async) utimes(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64) r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000800)={0x9, 0x8, 0xfffff684}, 0xc) (async, rerun: 64) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r6 = socket$inet(0x2, 0x80001, 0x84) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x32) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r7, 0x7fff}, &(0x7f00000000c0)=0x8) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x5, r0, 0x1}) (async, rerun: 64) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) (async) r12 = socket(0x25, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000037c0)=[{&(0x7f00000005c0)=@in6={0xa, 0x4e20, 0x7, @mcast2, 0x1}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000001640)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x202, 0xff, 0x5, r7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffff}}], 0x38, 0x20000004}, {&(0x7f0000001680)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000016c0)="94f9bc61239c5b8e0768d9b933e997a85fadcfe94e8c3a27adfaffc61ce78b96a7b68399b6e5f3848ec4ff93d115db7693bf2c25e8aed477c0014caddbe505fe88499405197eb5ec3cad03eb63e9c47560909ab088eab3a036ac45a5ed1b5909eb6b10baf0d15c21dd7a938230bad06fb158496431d5ae6d58c31a20e05536bc06cd39a8703b299348274e00187fee3efa5f", 0x92}, {&(0x7f0000001780)="5c44efce4e1f991034e651966c49649676ad0e2dd67147c10a23f30a294a1213bcd3252b713dd9f48ecb8b664f406c2da73de481bcf07e186d154b79ba880491377908d2b7d0f44bcfc93fed0e9d3ae7e110b26f2729f79db875a058e9d48952f156e4dd2cb2cccc32db30c7f2232d6a8433a9683b41842aa29c42e577dcb58f6c949172139eed145a54414b1b6e8a8f49aa9940aded89f4ba7135b99019f7750ac971c2fa2710e2a756c9239602ab6b00eaba68a4a78ef2e019e823feaf0746ae05a5b93230f0aab501ab1d9a0f0449c20c1922e0ea706f0cbda917b9", 0xdd}, {&(0x7f0000001880)="5f917e025d105094dba79c9828dc874162f5448f8a752fd595f116cc75a1a2492acb4a6b5f", 0x25}, {&(0x7f00000018c0)="77a1a4800eefa19c0816df596d331ed1623fa440ccffa64d263fecd85d4b2e8ba2324a1617238051cf73c33109b790567772bc7343780dba6b317c7b299426f689357241d257a54204c8cec1deb85026c71c5518730fef", 0x57}, {&(0x7f0000001940)="d1ead7d280734627a54d4fd0fb8a1c9a5bf9e9246f88c8de49e4cf66548cefaa622b1874e3172bd00a8811ebc2fc0ae118f92d526d8cd47ef1e762a9ef13bde8864d3fc35dc610e665e9e2", 0x4b}], 0x5}, {&(0x7f0000001a40)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001a80)="d0547401fb9a60721d6e72ade1df60d3a3a23c0c0d92eb63da415d6159ec845d9183eaba1321a60658faa2655f9a522eb919e4204301f1e16670523a5cc54dc43515dab646dc385015db937a60607abb21ff1607f76f4a5b2f1cec01341abe788c50a84d8b9f1220392b6b2b0f5086ef78a9481d666ce07be95c11e3a25f7c5456003ccb864c2a97e68c33788aadece849e3fe79a3ca29aca6e5c82fd2db95350187f4961ce177c9840c19b3c162d8a565c2b678a75c1f948a963a32ce9861e4b85d41c6cc36c219fd53544499253b94fccad32b1f1b978c502d774ac511157cfa7512b4d0ca219e3c55146c00859d", 0xef}, {&(0x7f0000001b80)="7057ad773661153bb03f4ebd6cb5e9245f74e55a2eb4b41f1b56e0f1d7dc7303fddd3d3c", 0x24}, {&(0x7f0000001bc0)="b9b15824be95ef3f3734af20ac7fffbe2f83a87c", 0x14}, {&(0x7f0000001c00)="a63b1c2b6701ab9bc1ca2f5bf57991c839838b", 0x13}, {&(0x7f0000001c40)="12d388bc3975d15e70b9c520d0435aed6b2a302ec4b6790f68c16927a4cf392760f41031c70a9c441e073b986acb2d760f812cf7d483e48725ac4f09274a7a76bd745790f9aa0c7fe6bdb74b44cc56fb7c002cd8a3ffed2c503513142d6ad89b1080234789483ec27d323d", 0x6b}, {&(0x7f0000001cc0)="034fff482bc4b15a7fc10825cca5af8fd6f28aab36bde15149f118b3b42b2072d083c719906f10c7871132f5ff2d464f55b3428d15869fb81c1cb65881c243d492891b476659aa2ce01075b2391c", 0x4e}], 0x6, &(0x7f0000001dc0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0xc75}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5, 0x6, 0x6, 0x40, 0x7, 0x1, 0x2, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xf677, 0x0, 0x80000000, 0x6, 0x5, 0x1ff, 0xcc79, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}], 0xe8, 0x8000}, {&(0x7f0000001ec0)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003000)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="23c2e65f2713e66e0cbfa6333cb21a68024f8dc7d6f6371bb621bd78e9fbfd3db52eff97a1578951f98b102ecb6bf4f46bd409d05c988566f223e5a64009fe52a81499480f28865d31654d869aee900d5c7ec72504d3aa45a39b743d327a54a0954310ec13d68b26c232345a1b7f0b56475b7363623e9ffc5d7dc7ab58094ef7025ecf4de5192bdf9a58cc8f7e8f98c1ebd733b414e699f4721b67412f422258050c813352265bfec2892f4cd05f436f448a6aed34f7519b2af3d04b55241f0413fe36ca4da7049f56e8", 0xca}], 0x2}, {&(0x7f0000003040)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003080)="07a136b185bf4424eceb78763435d42d40", 0x11}, {&(0x7f00000030c0)="fb04d5c22144f0a7d15e871adf496a", 0xf}, {&(0x7f0000003100)="629473afe27dd9b2744a05707bbc0217666c42162fc63e52c85e909fe7a4e6306679fe9b3e30e53c67856ef8484edb2f335ac814687a8e90caa0e6c78aecbe9cf86419c049131a6dd57ea4c1e54fdff87b7a70f55058a578cba5a11b04c4dadde13dbbd24792ad86b37312de726e261150c6efbf32e6f1cf1f6441e746f22cb0cfa8d0e2bac64da1b67e942787efd1a055711c1f53766082bd61063cb7cc05e522070276e62fc6a98bcfe6b551342a904513a4a7014f9dbcb9e2924e2fb41e812748364cc49d7e6d29dfb6", 0xcb}, {&(0x7f0000003200)="5b8e65b7d50f0405d40d01d519c9a48ded820cc1a09f9978399ac0", 0x1b}, {&(0x7f0000003240)="cc9eec122da661b89484ddb0b6ba88988754ec3b0cd2285524a65856e8a5e47289ddaca22ba2e47e78b961f95bdbf1d2493d50e08c2dbb51dac577ba2c9560582a8c79c4209c484f9a574c42a40746b5420b7c3e53ec1de984e78463042e70c5584b5f5115caebb788f5501d38f8408b200c63c666873917288d0ac0e1cef42fe2dabb12f9985e784a318dabc469a2127513c5af624951ffeefd51e6c38b384ab7a28ab216c1ccb689fad04bf45e932e6f961857fd87d769a6ee65f19019dfce61bca0af2bc6a376b418aa1a492113f7a2", 0xd1}, {&(0x7f0000003340)="b60846d9011ccea912003d06b291f3bd7d84c6fdf71ca6cd652b3e85f19e34876d0010a19f83956cceecac4c7eb87487777edc08e0c8bb5cf3c6551a051ec54711ef30910464e32020fb45f286bb4c3dd637c6f8a179ca785afba41a3cd685b042818b135ce40e88b70e7c1894c9ad2ec4085046362a2fcdcc3337960ab04bbee80d88c1c5ce8d2070e5b85fc43d10520074300d9155450c7de378dafca417c2e5887acd3562a7c4683d69bc472324c932a89e68dd67", 0xb6}, {&(0x7f0000003400)="726edbd3c80b228bf7349da8306ef5303261eb605042f80a2b5eba797c8d", 0x1e}, {&(0x7f0000003440)="52c337763e82162f8215caa368a5ca981f787e4f8e93d26e7d27c24b6630963135e4933c9982ece698ea09629f5d8e5c008666c8765b7da5c878c0f3eced0d53e784f8de41c2664e6780c445be5c4bf953c675c23e8af88a206317000652ced5286419839e968f7af5c338a671472cda7ca74f30af0a5bb69731e1a1219c03b24974a7a43d73860d838a9620e6f45710a05d369865ea6817918f1930f20f5dd0d721a6824cb9ef65a7", 0xa9}, {&(0x7f0000003500)="c5f01764050335f6c379644ac51d46a37f43dbf97e3fb3b0791c2429ca55b3eaac2eb2625601b8a8474364ca06f286965b03a0590fb2fa9803b0f6eefa792e55220b687eca98674d8c2cbed446cef4f47213fc77e8a3f6dd8f96e42715e2a2fee0924bf66fab0f96c7544d02e70b0b1a", 0x70}], 0x9, &(0x7f0000003640)=[@init={0x18, 0x84, 0x0, {0x101, 0x8, 0x676, 0x3}}], 0x18, 0x4000}, {&(0x7f0000003680)=@in6={0xa, 0x4e22, 0x23841683, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x9}, 0x1c, &(0x7f00000036c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001200000000000000084000000080000000000000000000000000000000093d83d5989c5ef00000118000000000000008400000005000000000000002807000020000000000000008400000008000000200100000000000000000000000000001800000000000000840000000000000002007f000c00050018000000000000008400000000000000070007003403ff0118000000000000008400000006000000ad0e000000000000"], 0xc0, 0x4000}], 0x6, 0x4008840) (async) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, 0x0, 0x85e) (async, rerun: 64) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDSKBSENT(r13, 0x4b49, &(0x7f00000005c0)={0x6, "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"}) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 269.688903ms ago: executing program 1 (id=4815): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000093e1ad40402010726b5b010203010902240001010740000904bcd1010101c1e70a24010400090201", @ANYRESHEX=0x0, @ANYRES32], 0x0) 25.648054ms ago: executing program 9 (id=4816): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x120) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000400)='\xcag\b\x1e_\x11+\xed\x8a\xb4Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x04\x00\x00\x00o\xe6\\#\x9a@\x02/\x00'/48, 0x30, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x5411, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x6, 'syz1\x00', @null, 0xb4, 0x5, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 9 (id=4817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0], 0x1}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r6, 0x331, 0x2000, 0x40080000, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) kernel console output (not intermixed with test programs): cd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 904.695505][T20714] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input100 [ 904.710021][T20714] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:33> initialized [ 904.876286][T13726] usb 9-1: USB disconnect, device number 33 [ 904.903575][ T9749] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 905.336327][T21065] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4116'. [ 905.345629][T21065] netlink: 'syz.2.4116': attribute type 1 has an invalid length. [ 905.353371][T21065] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4116'. [ 905.387315][T20714] usb 3-1: USB disconnect, device number 21 [ 905.746783][T21075] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 905.755044][T21075] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 906.270376][T21088] 9p: Unknown access argument : -22 [ 906.285885][T13726] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 906.375279][ T29] audit: type=1326 audit(1771719286.799:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21093 comm="syz.8.4128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe55e39c629 code=0x0 [ 906.468204][T13726] usb 3-1: device descriptor read/64, error -71 [ 906.503129][T21106] program syz.4.4131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.552428][T21108] netlink: 'syz.4.4132': attribute type 32 has an invalid length. [ 906.724193][T13726] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 906.863263][T13726] usb 3-1: device descriptor read/64, error -71 [ 906.981143][T13726] usb usb3-port1: attempt power cycle [ 907.345220][T13726] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 907.398359][T13726] usb 3-1: device descriptor read/8, error -71 [ 907.595403][ T2995] Bluetooth: hci4: Frame reassembly failed (-84) [ 907.602015][ T2995] Bluetooth: hci4: Frame reassembly failed (-84) [ 907.654286][T13726] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 907.676151][T13726] usb 3-1: device descriptor read/8, error -71 [ 907.794360][T13726] usb usb3-port1: unable to enumerate USB device [ 909.349119][T21148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.360223][T21148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.665393][ T9749] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 909.760541][ T5149] Bluetooth: hci4: command 0x1003 tx timeout [ 909.760900][T15592] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 909.813869][ T9749] usb 3-1: device descriptor read/64, error -71 [ 909.869432][T21150] dlm: no locking on control device [ 910.070698][ T9749] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 910.220129][ T9749] usb 3-1: device descriptor read/64, error -71 [ 910.330560][T21174] syz.8.4151 (21174): attempted to duplicate a private mapping with mremap. This is not supported. [ 910.338629][ T9749] usb usb3-port1: attempt power cycle [ 910.701238][T20682] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 910.711962][ T9749] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 910.735352][ T9749] usb 3-1: device descriptor read/8, error -71 [ 910.874353][T20682] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.884619][T20682] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 910.896593][T20682] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 910.907609][T20682] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 910.917446][T20682] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 910.933439][T20682] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 910.943246][T20682] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 910.951363][T20682] usb 9-1: Product: syz [ 910.956310][T20682] usb 9-1: Manufacturer: syz [ 910.961310][T20682] usb 9-1: SerialNumber: syz [ 910.970220][T20682] usb 9-1: config 0 descriptor?? [ 910.989904][ T9749] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 911.011933][ T9749] usb 3-1: device descriptor read/8, error -71 [ 911.130386][ T9749] usb usb3-port1: unable to enumerate USB device [ 911.192654][T20682] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 911.199653][T20682] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 911.407867][T20682] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 911.415442][T20682] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 911.429787][T20682] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 911.654570][T20682] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 911.663489][T20682] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 911.671834][T20682] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 911.681075][T20682] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 911.694070][T20682] usb 9-1: USB disconnect, device number 34 [ 912.529996][ T9749] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 912.712854][ T9749] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 912.727090][ T9749] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 912.741357][ T9749] usb 9-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 912.750593][ T9749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.761206][ T9749] usb 9-1: config 0 descriptor?? [ 912.767116][T21186] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 913.007995][ T9749] usbhid 9-1:0.0: can't add hid device: -71 [ 913.014286][ T9749] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 913.042822][ T9749] usb 9-1: USB disconnect, device number 35 [ 913.641962][ T9749] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 913.833646][ T9749] usb 9-1: Using ep0 maxpacket: 16 [ 913.842038][ T9749] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.864574][ T9749] usb 9-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 913.876576][ T9749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.899593][ T9749] usb 9-1: config 0 descriptor?? [ 914.047479][T13720] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 914.207974][T13720] usb 3-1: Using ep0 maxpacket: 32 [ 914.212717][T21228] comedi comedi0: Minor 3 could not be opened [ 914.219994][T13720] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 914.242165][T13720] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 914.251712][T13720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.259713][T13720] usb 3-1: Product: syz [ 914.284576][T13720] usb 3-1: Manufacturer: syz [ 914.296586][T13720] usb 3-1: SerialNumber: syz [ 914.320446][T13720] asix 3-1:2.0: probe with driver asix failed with error -22 [ 914.472575][ T9749] hkems 0003:2006:0118.002B: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.8-1/input0 [ 914.496930][ T9749] hkems 0003:2006:0118.002B: no inputs found [ 914.502969][ T9749] hkems 0003:2006:0118.002B: force feedback init failed [ 914.538967][T21242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.562191][T21242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.595566][ T9749] usb 3-1: USB disconnect, device number 30 [ 914.703939][T13726] usb 9-1: USB disconnect, device number 36 [ 915.089919][T21283] tmpfs: Bad value for 'size' [ 915.206512][T21287] tracefs: Unknown parameter 'ridwyYFσRS&o*]a5pq' [ 915.266990][T21291] netlink: 'syz.0.4172': attribute type 1 has an invalid length. [ 915.380670][T21302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.567667][T21314] tmpfs: Invalid uid '0x00000000ffffffff' [ 915.640613][ T9752] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 915.790143][T20682] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 915.802499][ T9752] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 915.810891][ T9752] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 915.821760][ T9752] usb 9-1: config 171 has no interface number 0 [ 915.828440][ T9752] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 915.838703][ T9752] usb 9-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 915.855162][ T9752] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 915.864618][ T9752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.873423][ T9752] usb 9-1: Product: syz [ 915.877788][ T9752] usb 9-1: Manufacturer: syz [ 915.882915][ T9752] usb 9-1: SerialNumber: syz [ 915.890747][T21302] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 915.950570][T20682] usb 3-1: Using ep0 maxpacket: 16 [ 915.957315][T20682] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 915.965824][T20682] usb 3-1: config 0 has no interface number 0 [ 915.972419][T20682] usb 3-1: config 0 interface 213 altsetting 225 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 915.984265][T20682] usb 3-1: config 0 interface 213 has no altsetting 0 [ 915.994285][T20682] usb 3-1: New USB device found, idVendor=12d1, idProduct=1412, bcdDevice= 0.00 [ 916.003393][T20682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.012681][T20682] usb 3-1: Product: syz [ 916.016936][T20682] usb 3-1: Manufacturer: syz [ 916.021652][T20682] usb 3-1: SerialNumber: syz [ 916.029303][T20682] usb 3-1: config 0 descriptor?? [ 916.116222][T21302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.125590][T21302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.138164][T21302] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 916.159369][ T9752] ath6kl: Failed to submit usb control message: -71 [ 916.175071][ T9752] ath6kl: unable to send the bmi data to the device: -71 [ 916.186797][ T9752] ath6kl: Unable to send get target info: -71 [ 916.213833][ T9752] ath6kl: Failed to init ath6kl core: -71 [ 916.224092][ T9752] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 916.252541][T21312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.267896][ T9752] usb 9-1: USB disconnect, device number 37 [ 916.283105][T21312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.319619][T20682] usb-storage 3-1:0.213: USB Mass Storage device detected [ 916.379988][T20682] usb 3-1: USB disconnect, device number 31 [ 916.880314][T21357] netlink: 'syz.4.4192': attribute type 2 has an invalid length. [ 916.964994][T21366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4195'. [ 916.976432][T20682] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 917.052663][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.065330][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.138221][T20682] usb 9-1: Using ep0 maxpacket: 16 [ 917.145146][T20682] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 917.153589][T20682] usb 9-1: config 0 has no interface number 0 [ 917.159884][T20682] usb 9-1: config 0 interface 109 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 917.170920][T20682] usb 9-1: config 0 interface 109 has no altsetting 0 [ 917.179536][T20682] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a7.d9 [ 917.188668][T13720] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 917.196807][T20682] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.205817][T20682] usb 9-1: Product: syz [ 917.210354][T20682] usb 9-1: Manufacturer: syz [ 917.214972][T20682] usb 9-1: SerialNumber: syz [ 917.221353][T20682] usb 9-1: config 0 descriptor?? [ 917.351014][T13720] usb 3-1: device descriptor read/64, error -71 [ 917.470592][T20682] powermate 9-1:0.109: probe with driver powermate failed with error -5 [ 917.487191][T20682] usb 9-1: USB disconnect, device number 38 [ 917.632641][T13720] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 917.800023][T13720] usb 3-1: device descriptor read/64, error -71 [ 917.928539][T13720] usb usb3-port1: attempt power cycle [ 918.046098][ T9749] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 918.206281][ T9749] usb 9-1: Using ep0 maxpacket: 32 [ 918.212980][ T9749] usb 9-1: config 0 has an invalid interface number: 254 but max is 0 [ 918.221384][ T9749] usb 9-1: config 0 has no interface number 0 [ 918.227485][ T9749] usb 9-1: config 0 interface 254 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 918.238672][ T9749] usb 9-1: config 0 interface 254 has no altsetting 0 [ 918.247602][ T9749] usb 9-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=bf.83 [ 918.256784][ T9749] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.264844][ T9749] usb 9-1: Product: syz [ 918.269029][ T9749] usb 9-1: Manufacturer: syz [ 918.273727][ T9749] usb 9-1: SerialNumber: syz [ 918.280191][ T9749] usb 9-1: config 0 descriptor?? [ 918.288633][ T9749] em28xx 9-1:0.254: New device syz syz @ 480 Mbps (eb1a:50a6, interface 254, class 254) [ 918.298499][ T9749] em28xx 9-1:0.254: Video interface 254 found: [ 918.313756][T13720] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 918.335515][T13720] usb 3-1: device descriptor read/8, error -71 [ 918.602165][T13720] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 918.623959][T13720] usb 3-1: device descriptor read/8, error -71 [ 918.743064][T13720] usb usb3-port1: unable to enumerate USB device [ 919.429985][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 919.439344][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.489518][ T9749] em28xx 9-1:0.254: unknown em28xx chip ID (0) [ 919.560654][ T9749] em28xx 9-1:0.254: reading from i2c device at 0xa0 failed (error=-5) [ 919.570292][ T9749] em28xx 9-1:0.254: board has no eeprom [ 919.638899][ T9749] em28xx 9-1:0.254: Identified as Gadmei UTV330 (card=37) [ 919.646158][ T9749] em28xx 9-1:0.254: [ 919.646158][ T9749] [ 919.646158][ T9749] The support for this board weren't valid yet. [ 919.646158][ T9749] Please send a report of having this working [ 919.646158][ T9749] not to V4L mailing list (and/or to other addresses) [ 919.646158][ T9749] [ 919.673386][ T9749] em28xx 9-1:0.254: analog set to bulk mode. [ 919.679662][T13726] em28xx 9-1:0.254: Registering V4L2 extension [ 919.693452][T15592] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 919.707900][T15592] Bluetooth: hci2: Injecting HCI hardware error event [ 919.718774][T15592] Bluetooth: hci2: hardware error 0x00 [ 919.762373][T13726] em28xx 9-1:0.254: reading from i2c device at 0x4a failed (error=-5) [ 919.773581][T13726] em28xx 9-1:0.254: reading from i2c device at 0x48 failed (error=-5) [ 919.786209][T13726] em28xx 9-1:0.254: reading from i2c device at 0x42 failed (error=-5) [ 919.795004][T13726] em28xx 9-1:0.254: reading from i2c device at 0x40 failed (error=-5) [ 919.824787][T13726] em28xx 9-1:0.254: reading from i2c device at 0x84 failed (error=-5) [ 919.833505][T13726] em28xx 9-1:0.254: reading from i2c device at 0x86 failed (error=-5) [ 919.842913][T13726] em28xx 9-1:0.254: reading from i2c device at 0x94 failed (error=-5) [ 919.851393][T13726] em28xx 9-1:0.254: reading from i2c device at 0x96 failed (error=-5) [ 919.883445][T13726] em28xx 9-1:0.254: reading from i2c device at 0xc0 failed (error=-5) [ 919.892064][T13726] em28xx 9-1:0.254: reading from i2c device at 0xc2 failed (error=-5) [ 919.900787][T13726] em28xx 9-1:0.254: reading from i2c device at 0xc4 failed (error=-5) [ 919.909377][T13726] em28xx 9-1:0.254: reading from i2c device at 0xc6 failed (error=-5) [ 919.924006][T13726] em28xx 9-1:0.254: reading from i2c device at 0xc8 failed (error=-5) [ 919.935233][T13726] em28xx 9-1:0.254: Config register raw data: 0xfffffffb [ 919.944033][T13726] em28xx 9-1:0.254: AC97 chip type couldn't be determined [ 919.951235][T13726] em28xx 9-1:0.254: No AC97 audio processor [ 919.972585][T13726] usb 9-1: Decoder not found [ 919.977296][T13726] em28xx 9-1:0.254: failed to create media graph [ 919.983809][T13726] em28xx 9-1:0.254: V4L2 device video103 deregistered [ 920.000701][T13726] em28xx 9-1:0.254: Remote control support is not available for this card. [ 920.569043][T13726] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 920.732057][T13726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.742268][T13726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.753402][T13726] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 920.762722][T13726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 920.770761][T13726] usb 3-1: SerialNumber: syz [ 920.994683][T20682] usb 9-1: USB disconnect, device number 39 [ 921.007980][T20682] em28xx 9-1:0.254: Disconnecting em28xx [ 921.013989][T20682] em28xx 9-1:0.254: Closing input extension [ 921.021049][T13726] usb 3-1: 0:2 : does not exist [ 921.040387][T13726] usb 3-1: unit 5: unexpected type 0x0b [ 921.045500][T20682] em28xx 9-1:0.254: Freeing device [ 921.154064][T13726] usb 3-1: USB disconnect, device number 36 [ 921.274184][T21409] tipc: Started in network mode [ 921.280629][T21409] tipc: Node identity 62ef6c4b9b2f, cluster identity 4711 [ 921.288750][T21409] tipc: Enabled bearer , priority 0 [ 921.377432][T21409] syzkaller0: entered promiscuous mode [ 921.383376][T21409] syzkaller0: entered allmulticast mode [ 921.390067][T21409] tipc: Resetting bearer [ 921.523992][T21408] tipc: Resetting bearer [ 921.786027][T21421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4212'. [ 921.857993][T21428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4214'. [ 921.905531][T15592] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 923.945363][T21408] tipc: Disabling bearer [ 923.962527][T20682] tipc: Node number set to 4190137419 [ 924.105419][T21456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.449910][T13720] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 924.611871][T13720] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 924.621072][T13720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.631623][T13720] usb 3-1: config 0 descriptor?? [ 924.855965][T21462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.865823][T21460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.867749][T21462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.880194][T21460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.104650][T13720] usb 3-1: Cannot set MAC address [ 925.110025][T13720] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 925.129538][T13720] usb 3-1: USB disconnect, device number 37 [ 925.392201][T21466] Bluetooth: MGMT ver 1.23 [ 925.396654][T21466] Bluetooth: hci2: invalid len left 7, exp >= 199 [ 925.722483][T21477] tipc: Enabling of bearer rejected, media not registered [ 925.767175][T13726] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 925.937463][T13726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.948889][T13726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.959265][T13726] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 925.968418][T13726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.978400][T13726] usb 9-1: config 0 descriptor?? [ 926.205009][T13726] usbhid 9-1:0.0: can't add hid device: -71 [ 926.213083][T13726] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 926.223386][T13726] usb 9-1: USB disconnect, device number 40 [ 926.673639][T20682] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 926.846105][T20682] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 926.857658][T20682] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.867594][T20682] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 926.876751][T20682] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.887288][T20682] usb 9-1: config 0 descriptor?? [ 926.893956][T20682] hub 9-1:0.0: USB hub found [ 927.037214][T13726] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 927.107979][T20682] hub 9-1:0.0: 1 port detected [ 927.200535][T13726] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 927.208929][T13726] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 927.217050][T13726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 927.226133][T13726] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 927.236262][T13726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 927.245236][T13726] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 927.254374][T13726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.262603][T13726] usb 3-1: Product: syz [ 927.267279][T13726] usb 3-1: Manufacturer: syz [ 927.271912][T13726] usb 3-1: SerialNumber: syz [ 927.280232][T13726] usb 3-1: config 0 descriptor?? [ 927.286058][T21487] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 927.519456][T13726] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 927.530447][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 927.539901][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 927.547862][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 927.557931][T13726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 927.568797][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 927.576866][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 927.586516][T13726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 927.597634][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 927.607434][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 927.618288][T13726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 927.629367][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 927.640333][T13726] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 927.650293][T13726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 927.664139][T13726] usb 3-1: USB disconnect, device number 38 [ 927.679315][T13726] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 927.708410][T13726] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 927.731351][T13726] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 927.749323][T13726] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 927.760294][T13726] keyspan 3-1:0.0: device disconnected [ 928.110800][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4241'. [ 928.405642][T15592] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 928.416764][T15592] Bluetooth: hci1: Injecting HCI hardware error event [ 928.426755][T15592] Bluetooth: hci1: hardware error 0x00 [ 928.493545][T20682] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 928.499948][T20682] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 928.510211][T20682] usbhid 9-1:0.0: can't add hid device: -32 [ 928.516236][T20682] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 928.813117][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4243'. [ 928.845211][T20682] usb 9-1: USB disconnect, device number 41 [ 928.917314][ T29] audit: type=1326 audit(1771719307.873:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21516 comm="syz.8.4244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe55e39c629 code=0x0 [ 929.901269][T21532] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4249'. [ 930.578313][T13723] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 930.594864][T21558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.615911][T21558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.630673][T15592] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 930.771081][T13723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.808298][T13723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 930.821697][T13723] usb 3-1: config 1 has no interface number 0 [ 930.827867][T13723] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.842931][T13723] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 930.904673][T13723] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 930.927587][T13723] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 931.006679][T13723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.017271][T21573] QAT: failed to copy from user cfg_data. [ 931.026010][T13723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.039010][T13723] usb 3-1: Product: syz [ 931.043772][T13723] usb 3-1: Manufacturer: syz [ 931.048686][T13723] usb 3-1: SerialNumber: syz [ 931.591473][T13719] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 931.773325][T13719] usb 9-1: Using ep0 maxpacket: 16 [ 931.799568][T13719] usb 9-1: unable to get BOS descriptor or descriptor too short [ 931.808898][T13719] usb 9-1: config 7 has an invalid interface number: 48 but max is 0 [ 931.826644][T13719] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 931.836803][T13719] usb 9-1: config 7 has no interface number 0 [ 931.859317][T13719] usb 9-1: config 7 interface 48 has no altsetting 0 [ 931.873505][T13719] usb 9-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 931.890843][T13719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.898883][T13719] usb 9-1: Product: syz [ 931.922867][T13719] usb 9-1: Manufacturer: syz [ 931.927569][T13719] usb 9-1: SerialNumber: syz [ 932.149129][T13723] cdc_ncm 3-1:1.1: bind() failure [ 932.163875][T21581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.175430][T21581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.186555][T13719] cdc_phonet 9-1:7.48: probe with driver cdc_phonet failed with error -22 [ 932.203061][T13719] usb 9-1: USB disconnect, device number 42 [ 932.374557][T21543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.394431][T21543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.416636][T13719] usb 3-1: USB disconnect, device number 39 [ 933.430592][T13719] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 933.625210][T13719] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 933.634328][T13719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.646370][T13719] usb 3-1: config 0 descriptor?? [ 933.661043][T13719] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 933.868741][T13719] gp8psk: usb in 128 operation failed. [ 933.883658][T13719] gp8psk: usb in 137 operation failed. [ 933.900136][T13719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 933.913855][T13719] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 933.924721][T13719] usb 3-1: media controller created [ 933.949626][T13719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.964257][T21613] overlayfs: failed to get inode (-116) [ 933.986870][T13719] gp8psk_fe: Frontend attached [ 933.987116][T21613] overlayfs: failed to get inode (-116) [ 933.995263][T13719] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 934.008677][T13719] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 934.019122][T21614] overlayfs: failed to get inode (-116) [ 934.025084][T21614] overlayfs: failed to get inode (-116) [ 934.071524][T21613] overlayfs: failed to get inode (-116) [ 934.077683][T21613] overlayfs: failed to get inode (-116) [ 934.084004][T21613] overlayfs: failed to get inode (-116) [ 934.089968][T21613] overlayfs: failed to get inode (-116) [ 934.479593][T13719] gp8psk: usb in 137 operation failed. [ 934.489129][T13719] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 934.510472][T13719] gp8psk: found Genpix USB device pID = 203 (hex) [ 934.523307][T13719] usb 3-1: USB disconnect, device number 40 [ 934.631984][T21627] bridge0: port 3(veth0) entered blocking state [ 934.635223][T13719] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 934.639620][T21627] bridge0: port 3(veth0) entered disabled state [ 934.656552][T21627] veth0: entered allmulticast mode [ 934.664825][T21627] veth0: entered promiscuous mode [ 934.670485][T21627] bridge0: port 3(veth0) entered blocking state [ 934.676831][T21627] bridge0: port 3(veth0) entered forwarding state [ 935.063137][T21634] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 935.069695][T21634] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 935.078569][T21634] vhci_hcd vhci_hcd.0: Device attached [ 935.089691][T21634] vhci_hcd vhci_hcd.0: port 0 already used [ 935.096563][T21635] vhci_hcd: connection closed [ 935.100859][ T2995] vhci_hcd vhci_hcd.2: stop threads [ 935.115439][ T2995] vhci_hcd vhci_hcd.2: release socket [ 935.122015][ T2995] vhci_hcd vhci_hcd.2: disconnect device [ 935.136573][T21641] netlink: 'syz.4.4274': attribute type 9 has an invalid length. [ 935.145135][T21641] netlink: 'syz.4.4274': attribute type 11 has an invalid length. [ 935.153695][T21641] netlink: 'syz.4.4274': attribute type 12 has an invalid length. [ 935.161544][T21641] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.4274'. [ 935.172075][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4274'. [ 935.190862][T21641] comedi comedi3: pcmda12: I/O port conflict (0x4004f27,16) [ 935.618519][T21664] overlayfs: failed to resolve '/A8': -2 [ 935.753233][T21672] Invalid argument reading file caps for ./file0 [ 935.798145][T21678] No source specified [ 935.836231][T21675] sctp: [Deprecated]: syz.0.4283 (pid 21675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 935.836231][T21675] Use struct sctp_sack_info instead [ 936.039121][T13719] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 936.190014][T13719] usb 9-1: device descriptor read/64, error -71 [ 936.413224][T13720] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 936.456020][T13719] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 936.573556][T13720] usb 3-1: Using ep0 maxpacket: 32 [ 936.581148][T13720] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 936.589495][T13720] usb 3-1: config 0 has no interface number 0 [ 936.595840][T13719] usb 9-1: device descriptor read/64, error -71 [ 936.602541][T13720] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 936.613854][T13720] usb 3-1: config 0 interface 85 has no altsetting 0 [ 936.622524][T13720] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 936.631786][T13720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.639825][T13720] usb 3-1: Product: syz [ 936.643990][T13720] usb 3-1: Manufacturer: syz [ 936.648788][T13720] usb 3-1: SerialNumber: syz [ 936.655170][T13720] usb 3-1: config 0 descriptor?? [ 936.713139][T13719] usb usb9-port1: attempt power cycle [ 937.086864][T13719] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 937.096528][T13720] appletouch 3-1:0.85: Geyser mode initialized. [ 937.106108][T13720] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input101 [ 937.122943][T13719] usb 9-1: device descriptor read/8, error -71 [ 937.310838][T13720] usb 3-1: USB disconnect, device number 41 [ 937.329959][T13720] appletouch 3-1:0.85: input: appletouch disconnected [ 937.386258][T13719] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 937.419155][T13719] usb 9-1: device descriptor read/8, error -71 [ 937.537581][T13719] usb usb9-port1: unable to enumerate USB device [ 937.916518][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'. [ 938.576733][T21749] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4308'. [ 938.915004][ T9749] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 939.090943][ T9749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 939.104064][ T9749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.117210][ T9749] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 939.126771][ T9749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.138944][ T9749] usb 3-1: config 0 descriptor?? [ 939.145123][T21756] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 939.377885][ T9749] usbhid 3-1:0.0: can't add hid device: -71 [ 939.396313][ T9749] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 939.416480][ T9749] usb 3-1: USB disconnect, device number 42 [ 939.679697][T21756] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4310'. [ 940.013394][T21781] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4315'. [ 940.372717][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4317'. [ 940.579990][T21797] netlink: 843 bytes leftover after parsing attributes in process `syz.2.4322'. [ 940.661611][T21806] loop2: detected capacity change from 0 to 7 [ 940.669777][T21806] Dev loop2: unable to read RDB block 7 [ 940.675345][T21806] loop2: AHDI p1 p2 p3 [ 940.680080][T21806] loop2: partition table partially beyond EOD, truncated [ 940.687255][T21806] loop2: p1 start 1601398130 is beyond EOD, truncated [ 940.694234][T21806] loop2: p2 start 1702059890 is beyond EOD, truncated [ 940.711491][T21806] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4324'. [ 941.786204][T21816] 9p: Bad value for 'wfdno' [ 941.852890][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.860534][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.868058][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.875453][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.883186][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.891001][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.898522][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.905997][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.913429][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.924210][T13719] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 941.933631][T13719] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 941.953815][T13720] psmouse serio7: Failed to reset mouse on : -5 [ 943.052481][T13723] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 943.213242][T13723] usb 9-1: Using ep0 maxpacket: 8 [ 943.224587][T13723] usb 9-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 943.233787][T13723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.253343][T13723] usb 9-1: config 0 descriptor?? [ 943.270048][T13723] usblcd 9-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 943.489703][T13723] usb 9-1: USB disconnect, device number 47 [ 943.951687][T21850] nft_compat: unsupported protocol 1 [ 944.559926][ T9752] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 944.733996][ T9752] usb 9-1: unable to get BOS descriptor or descriptor too short [ 944.745406][ T9752] usb 9-1: not running at top speed; connect to a high speed hub [ 944.754707][ T9752] usb 9-1: config 1 interface 0 has no altsetting 0 [ 944.764247][ T9752] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 944.773563][ T9752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.782615][ T9752] usb 9-1: Product: syz [ 944.787170][ T9752] usb 9-1: Manufacturer: syz [ 944.791785][ T9752] usb 9-1: SerialNumber: syz [ 945.024991][T21880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.035326][T21880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.065456][ T9752] usbhid 9-1:1.0: can't add hid device: -71 [ 945.071498][ T9752] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 945.087551][ T9752] usb 9-1: USB disconnect, device number 48 [ 945.120428][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4343'. [ 945.644367][T21892] XFS (nbd8): SB validate failed with error -5. [ 945.992590][T13720] misc userio: Buffer overflowed, userio client isn't keeping up [ 946.815911][T13723] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 946.976143][T13723] usb 9-1: Using ep0 maxpacket: 32 [ 946.983771][T13723] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 946.992251][T13723] usb 9-1: config 0 has no interface number 0 [ 946.998630][T13723] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 947.009638][T13723] usb 9-1: config 0 interface 85 has no altsetting 0 [ 947.018366][T13723] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 947.027505][T13723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.035538][T13723] usb 9-1: Product: syz [ 947.039714][T13723] usb 9-1: Manufacturer: syz [ 947.044402][T13723] usb 9-1: SerialNumber: syz [ 947.051109][T13723] usb 9-1: config 0 descriptor?? [ 947.119322][T13720] input: PS/2 Generic Mouse as /devices/serio7/input/input103 [ 947.361060][T13720] psmouse serio7: Failed to enable mouse on [ 947.708031][T13723] appletouch 9-1:0.85: Geyser mode initialized. [ 947.729286][T13723] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input104 [ 947.922291][T13720] usb 9-1: USB disconnect, device number 49 [ 947.961818][T13720] appletouch 9-1:0.85: input: appletouch disconnected [ 948.163182][T13723] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 948.325536][T13723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 948.346397][T13723] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 948.365991][T13723] usb 3-1: config 1 has no interface number 1 [ 948.372143][T13723] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 948.397419][T13723] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.419482][T13723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.427625][T13723] usb 3-1: Product: syz [ 948.438409][T13723] usb 3-1: Manufacturer: syz [ 948.443344][T13723] usb 3-1: SerialNumber: syz [ 948.576231][T21927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4355'. [ 948.620160][T21927] team0: Port device team_slave_0 removed [ 948.790547][T21931] Invalid source name [ 948.794724][T21931] UBIFS error (pid: 21931): cannot open "./file0", error -22 [ 948.909613][T13723] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 948.925099][T13726] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 948.934676][T13723] usb 3-1: found format II with max.bitrate = 26774, frame size=65535 [ 948.944916][T13723] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 948.952777][T13723] usb 3-1: found format II with max.bitrate = 26774, frame size=65535 [ 949.010576][T13723] usb 3-1: USB disconnect, device number 43 [ 949.047042][T17978] udevd[17978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.117800][T13726] usb 9-1: Using ep0 maxpacket: 32 [ 949.127062][T13726] usb 9-1: config 0 interface 0 has no altsetting 0 [ 949.147709][T13726] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 949.157498][T13726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.166045][T13726] usb 9-1: Product: syz [ 949.170928][T13726] usb 9-1: Manufacturer: syz [ 949.175548][T13726] usb 9-1: SerialNumber: syz [ 949.184430][T13726] usb 9-1: config 0 descriptor?? [ 949.601314][T21935] usb usb1: check_ctrlrecip: process 21935 (syz.2.4359) requesting ep 01 but needs 81 [ 949.612822][T21935] usb usb1: usbfs: process 21935 (syz.2.4359) did not claim interface 0 before use [ 949.638026][T13726] gs_usb 9-1:0.0: Couldn't get device config: (err=-71) [ 949.646336][T13726] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 949.660461][T13726] usb 9-1: USB disconnect, device number 50 [ 949.758760][T21937] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 949.766151][T21937] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 950.140884][T13720] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 950.212599][ T29] audit: type=1326 audit(1771719327.796:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21945 comm="syz.8.4363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55e39c629 code=0x0 [ 950.302934][T13720] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 950.311358][T13720] usb 3-1: config 0 has no interface number 1 [ 950.317717][T13720] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 950.326902][T13720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.338130][T13720] usb 3-1: config 0 descriptor?? [ 950.562949][T13720] usb 3-1: USB disconnect, device number 44 [ 951.196383][T21959] sg_write: data in/out 327681/8 bytes for SCSI command 0x0-- guessing data in; [ 951.196383][T21959] program syz.2.4369 not setting count and/or reply_len properly [ 951.221344][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'. [ 951.341923][T21972] binder: Bad value for 'max' [ 951.438950][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 951.448350][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 951.466546][T13723] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 951.481868][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 951.487862][T13726] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 951.490960][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 951.557560][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 951.567061][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 951.639434][T13723] usb 9-1: Using ep0 maxpacket: 32 [ 951.646625][T13723] usb 9-1: unable to get BOS descriptor or descriptor too short [ 951.656169][T13723] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 951.671503][T13723] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 951.682204][T13723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.690993][T13726] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 951.701329][T13723] usb 9-1: Product: syz [ 951.706312][T13726] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 951.719680][T13723] usb 9-1: Manufacturer: syz [ 951.724443][T13723] usb 9-1: SerialNumber: syz [ 951.739995][T13726] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 951.752811][T13726] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 951.761859][T13726] usb 3-1: Manufacturer: syz [ 951.766786][T13726] usb 3-1: SerialNumber: syz [ 951.956878][T13723] usb 9-1: Not enough endpoints found in device, aborting! [ 952.012520][T13726] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 952.027331][T13726] usb 3-1: USB disconnect, device number 45 [ 952.170478][T21040] usb 9-1: USB disconnect, device number 51 [ 952.189690][T21990] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 952.198272][T21990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.210115][T21990] netlink: 'syz.4.4378': attribute type 1 has an invalid length. [ 952.217956][T21990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4378'. [ 952.856404][T21040] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 953.005980][T21040] usb 3-1: device descriptor read/64, error -71 [ 953.262648][T21040] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 953.401567][T21040] usb 3-1: device descriptor read/64, error -71 [ 953.520380][T21040] usb usb3-port1: attempt power cycle [ 953.893407][T21040] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 953.904118][T13726] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 953.916044][T21040] usb 3-1: device descriptor read/8, error -71 [ 954.066374][T13726] usb 9-1: config 4 has an invalid interface number: 88 but max is 1 [ 954.074479][T13726] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 954.084725][T13726] usb 9-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 954.093853][T13726] usb 9-1: config 4 has no interface number 0 [ 954.102240][T13726] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 954.111360][T13726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.120049][T13726] usb 9-1: Product: syz [ 954.124218][T13726] usb 9-1: Manufacturer: syz [ 954.128868][T13726] usb 9-1: SerialNumber: syz [ 954.182044][T21040] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 954.204176][T21040] usb 3-1: device descriptor read/8, error -71 [ 954.322897][T21040] usb usb3-port1: unable to enumerate USB device [ 956.073403][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'. [ 956.247008][T22020] team_slave_0: entered promiscuous mode [ 956.253234][T22020] team_slave_1: entered promiscuous mode [ 956.260259][T22020] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 956.268271][T22020] team_slave_0: left promiscuous mode [ 956.274163][T22020] team_slave_1: left promiscuous mode [ 956.306288][T22020] team0 (unregistering): Port device team_slave_0 removed [ 956.317802][T22020] team0 (unregistering): Port device team_slave_1 removed [ 956.630086][T22028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4393'. [ 956.875941][T13726] usb 9-1: USB disconnect, device number 52 [ 956.940473][T21040] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 957.100758][T21040] usb 3-1: Using ep0 maxpacket: 8 [ 957.107644][T21040] usb 3-1: unable to get BOS descriptor or descriptor too short [ 957.116578][T21040] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 957.124950][T21040] usb 3-1: config 0 has no interface number 0 [ 957.131159][T21040] usb 3-1: config 0 interface 165 has no altsetting 0 [ 957.142036][T21040] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 957.151456][T21040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.160123][T21040] usb 3-1: Product: syz [ 957.164293][T21040] usb 3-1: Manufacturer: syz [ 957.168973][T21040] usb 3-1: SerialNumber: syz [ 957.176702][T21040] usb 3-1: config 0 descriptor?? [ 957.335946][T13726] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 957.403567][T21040] ni6501 3-1:0.165: driver 'ni6501' failed to auto-configure device. [ 957.416738][T21040] usb 3-1: USB disconnect, device number 50 [ 957.498714][T13726] usb 9-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 957.509913][T13726] usb 9-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 957.521431][T13726] usb 9-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 957.535721][T13726] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.544851][T13726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.552941][T13726] usb 9-1: SerialNumber: syz [ 957.780805][T22038] netlink: 14568 bytes leftover after parsing attributes in process `syz.8.4397'. [ 957.792994][T22038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.802495][T22038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.812485][T22038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.821301][T22038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.834241][T13726] rndis_host 9-1:253.0: RNDIS init failed, -71 [ 957.841229][T13726] rndis_host 9-1:253.0: probe with driver rndis_host failed with error -71 [ 957.855127][T13726] usb 9-1: USB disconnect, device number 53 [ 958.234459][T13726] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 958.244014][T22042] netlink: 'syz.0.4399': attribute type 2 has an invalid length. [ 958.396097][T13726] usb 3-1: Using ep0 maxpacket: 8 [ 958.419880][T13726] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 958.433974][T13726] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 958.445816][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 958.467591][T13726] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.480328][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 958.491965][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 958.503535][T13726] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 958.507060][T22057] tmpfs: Bad value for 'mpol' [ 958.517133][T13726] usb 3-1: config 168 interface 0 has no altsetting 0 [ 958.518224][T13726] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 958.539070][T13726] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 958.550328][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 958.561995][T13726] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.574011][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 958.580025][T22059] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4405'. [ 958.585627][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 958.610483][T13726] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 958.629465][T13726] usb 3-1: config 168 interface 0 has no altsetting 0 [ 958.637573][T13726] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 958.645174][T13726] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 958.656714][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 958.668191][T13726] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.680271][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 958.692736][T13726] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 958.704471][T13726] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 958.718097][T13726] usb 3-1: config 168 interface 0 has no altsetting 0 [ 958.730447][T13726] usb 3-1: string descriptor 0 read error: -22 [ 958.736785][T13726] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 958.746417][T13726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.763099][T13726] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 958.864782][T13728] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 958.980007][T22040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.988870][T22040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.998575][T13726] usb 3-1: USB disconnect, device number 51 [ 959.025466][T13728] usb 9-1: Using ep0 maxpacket: 16 [ 959.032170][T13728] usb 9-1: config 0 has no interfaces? [ 959.039524][T22059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.049154][T22059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.060265][T13728] usb 9-1: string descriptor 0 read error: -71 [ 959.068958][T13728] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.078044][T13728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.089048][T13728] usb 9-1: config 0 descriptor?? [ 959.095974][T13728] usb 9-1: can't set config #0, error -71 [ 959.103580][T13728] usb 9-1: USB disconnect, device number 54 [ 959.810113][T22074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.976379][T22084] XFS (nullb0): Invalid superblock magic number [ 960.007735][ T9752] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 960.027470][T13720] IPVS: starting estimator thread 0... [ 960.115679][T22091] IPVS: using max 41 ests per chain, 98400 per kthread [ 960.190557][ T9752] usb 9-1: Using ep0 maxpacket: 32 [ 960.198069][ T9752] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 960.209598][ T9752] usb 9-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.224173][ T9752] usb 9-1: config 1 interface 0 has no altsetting 0 [ 960.233980][ T9752] usb 9-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.40 [ 960.243049][ T9752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.251106][ T9752] usb 9-1: Product: ࠧ [ 960.256223][ T9752] usb 9-1: Manufacturer: ࠠ [ 960.260855][ T9752] usb 9-1: SerialNumber: 鷺믫ܧ톬ﻲᱤ됬攆蕜J㺖俔៫4ꉨ⟹뒍㆞⎒湹㣷䔯Ṫ䱬퉄쿯셍ꑵ氭낅⚹悇ࢀ防鯆ᑻ뤘唌媐欹棶ꇥ윧歑憸㈳❝煇咏꘬Ȩ卸챲赑춤䯛ͧ䴻咋雸熃鑢좘⭺﮺⊗ꚾ陈岻웊⚇䏸䋕겔ⷷ봝攠哏Č灙풵䴆ໍ曫訊蝫 [ 960.295655][ T9752] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 960.304647][ T9752] usb 9-1: no configuration chosen from 1 choice [ 960.426770][T13728] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 960.564814][T13728] usb 3-1: device descriptor read/64, error -71 [ 960.821448][T13728] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 960.960321][T13728] usb 3-1: device descriptor read/64, error -71 [ 961.078344][T13728] usb usb3-port1: attempt power cycle [ 961.441399][T13728] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 961.463350][T13728] usb 3-1: device descriptor read/8, error -71 [ 961.672174][T22098] 9p: Bad value for 'wfdno' [ 961.730117][T13728] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 961.764062][T13728] usb 3-1: device descriptor read/8, error -71 [ 961.880346][T13728] usb usb3-port1: unable to enumerate USB device [ 962.953921][T13726] usb 9-1: USB disconnect, device number 55 [ 963.401320][T22111] [U]  [ 964.178474][T13726] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 964.352369][T13726] usb 9-1: unable to get BOS descriptor or descriptor too short [ 964.361088][T13726] usb 9-1: not running at top speed; connect to a high speed hub [ 964.370567][T13726] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.389035][T13726] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.401333][T13726] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.411349][T13726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.420648][T13726] usb 9-1: Product: syz [ 964.426807][T13726] usb 9-1: Manufacturer: syz [ 964.431517][T13726] usb 9-1: SerialNumber: syz [ 966.623453][T13728] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 966.787099][T13728] usb 3-1: Using ep0 maxpacket: 8 [ 966.795418][T13728] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 966.804135][T13728] usb 3-1: config 6 has no interface number 0 [ 966.812454][T13728] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 966.822895][T13728] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.835183][T13728] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 966.846937][T13728] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 966.879934][T13728] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 966.890930][T13728] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 966.901355][T13728] usb 3-1: Product: syz [ 966.906228][T13728] usb 3-1: Manufacturer: syz [ 966.910932][T13728] usb 3-1: SerialNumber: syz [ 966.933943][T13728] hso 3-1:6.2: Failed to find BULK IN ep [ 967.154030][T13728] usb 3-1: USB disconnect, device number 56 [ 967.246301][T13726] usb 9-1: 0:2 : does not exist [ 967.264291][T13726] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 967.280638][T13726] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 967.295192][T13726] usb 9-1: 0:0: failed to get current value for ch 1 (-22) [ 967.313520][T13726] usb 9-1: 0:0: cannot get min/max values for control 2 (id 0) [ 967.337705][T13726] usb 9-1: 0:0: cannot get min/max values for control 2 (id 0) [ 967.433688][T13726] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 967.516335][T13726] usb 9-1: USB disconnect, device number 56 [ 967.563440][T22154] Mount JFS Failure: -5 [ 972.382468][T22228] binder: Bad value for 'stats' [ 972.691405][T22240] netlink: 'syz.8.4462': attribute type 6 has an invalid length. [ 972.721101][T21040] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 972.882825][T21040] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.914591][T21040] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.928585][T21040] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 972.937966][T21040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.114893][T22249] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4466'. [ 973.125253][T22249] netlink: 'syz.8.4466': attribute type 46 has an invalid length. [ 973.187729][T21040] usb 3-1: usb_control_msg returned -32 [ 973.196187][T21040] usbtmc 3-1:16.0: can't read capabilities [ 973.213660][ T9752] usb 3-1: USB disconnect, device number 57 [ 973.366673][T22262] netlink: zone id is out of range [ 973.371877][T22262] netlink: zone id is out of range [ 973.377884][T22262] netlink: zone id is out of range [ 973.383319][T22262] netlink: zone id is out of range [ 973.389280][T22262] netlink: zone id is out of range [ 973.395921][T22262] netlink: zone id is out of range [ 973.401083][T22262] netlink: zone id is out of range [ 973.406587][T22262] netlink: zone id is out of range [ 973.411778][T22262] netlink: zone id is out of range [ 973.417881][T22262] netlink: zone id is out of range [ 973.448708][T20682] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 973.620676][T20682] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 973.629443][T20682] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 973.669108][T20682] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 973.699470][T20682] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 973.728886][T20682] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 973.751293][T20682] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 973.761063][T20682] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 973.773003][T20682] usb 9-1: Product: syz [ 973.777299][T20682] usb 9-1: Manufacturer: syz [ 973.795113][T20682] cdc_wdm 9-1:1.0: skipping garbage [ 973.802770][T20682] cdc_wdm 9-1:1.0: skipping garbage [ 973.809908][T20682] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 973.817481][T20682] cdc_wdm 9-1:1.0: Unknown control protocol [ 974.008937][T21040] usb 9-1: USB disconnect, device number 57 [ 974.078717][T13726] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 974.248782][T13726] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 974.258146][T13726] usb 3-1: config 3 has no interface number 0 [ 974.265624][T13726] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 974.277569][T13726] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 974.292618][T13726] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 974.302996][T13726] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 974.312382][T13726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.332922][T22277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 974.345991][T21040] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 974.508893][T21040] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 974.518573][T21040] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 974.528857][T21040] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 974.537851][T21040] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 974.549133][T21040] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 974.563022][T21040] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 974.573482][T21040] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 974.581670][T21040] usb 9-1: Product: syz [ 974.585880][T21040] usb 9-1: Manufacturer: syz [ 974.597732][T21040] cdc_wdm 9-1:1.0: skipping garbage [ 974.607617][T21040] cdc_wdm 9-1:1.0: skipping garbage [ 974.617254][T21040] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 974.623225][T21040] cdc_wdm 9-1:1.0: Unknown control protocol [ 975.192771][T20682] usb 9-1: USB disconnect, device number 58 [ 975.257834][T22305] trusted_key: encrypted_key: insufficient parameters specified [ 975.268462][T22305] binder_alloc: 22304: binder_alloc_buf, no vma [ 975.525695][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4475'. [ 976.505640][T21040] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 976.669882][T21040] usb 9-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice=c6.06 [ 976.679150][T21040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.687168][T21040] usb 9-1: Product: syz [ 976.691457][T21040] usb 9-1: Manufacturer: syz [ 976.696075][T21040] usb 9-1: SerialNumber: syz [ 976.702923][T21040] usb 9-1: config 0 descriptor?? [ 976.930326][T22316] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4477'. [ 976.973452][T13726] usb 3-1: string descriptor 0 read error: -71 [ 976.985563][T13726] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 976.994650][T13726] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 977.007046][T13726] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 977.018329][T13726] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 977.050651][T13726] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 977.064509][T13726] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 977.077424][T13726] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 977.104653][T13726] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 977.123899][T13726] usb 3-1: USB disconnect, device number 58 [ 977.134870][T13726] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 977.160716][T13726] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 977.180032][T13726] keyspan 3-1:3.168: device disconnected [ 977.313866][T17347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.461193][T17347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.591487][T17347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.686424][T17347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.400793][T17347] bridge_slave_1: left allmulticast mode [ 978.439726][T17347] bridge_slave_1: left promiscuous mode [ 978.463255][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.474084][T17347] bridge_slave_0: left allmulticast mode [ 978.479755][T17347] bridge_slave_0: left promiscuous mode [ 978.499861][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.502378][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.521630][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.534789][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.549011][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.556662][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.229260][T17347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.255246][T17347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.280335][T17347] bond0 (unregistering): Released all slaves [ 979.495893][ T9752] usb 9-1: USB disconnect, device number 59 [ 979.603794][ T29] audit: type=1326 audit(1771719355.285:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.8.4483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55e39c629 code=0x0 [ 979.799053][T17347] hsr_slave_0: left promiscuous mode [ 979.805770][T17347] hsr_slave_1: left promiscuous mode [ 979.816246][T17347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.825421][T17347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.833916][T17347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.841422][T17347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.859350][T17347] veth1_macvtap: left promiscuous mode [ 979.865523][T17347] veth0_macvtap: left promiscuous mode [ 979.871213][T17347] veth1_vlan: left promiscuous mode [ 979.880209][T17347] veth0_vlan: left promiscuous mode [ 980.267836][T22325] chnl_net:caif_netlink_parms(): no params data found [ 980.406673][T22325] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.427918][T22325] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.435438][T22325] bridge_slave_0: entered allmulticast mode [ 980.442993][T22325] bridge_slave_0: entered promiscuous mode [ 980.454294][T22325] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.461755][T22325] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.469351][T22325] bridge_slave_1: entered allmulticast mode [ 980.488081][T22325] bridge_slave_1: entered promiscuous mode [ 980.531506][T22325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.547373][T22325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.605506][T22325] team0: Port device team_slave_0 added [ 980.619747][T22325] team0: Port device team_slave_1 added [ 980.674846][T22367] syzkaller1: entered promiscuous mode [ 980.680530][T22367] syzkaller1: entered allmulticast mode [ 980.694776][T22325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.702833][T22325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.734352][T22325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.749489][T22325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.756650][T15592] Bluetooth: hci1: command tx timeout [ 980.763578][T22325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.793052][T22325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.844350][T17347] IPVS: stop unused estimator thread 0... [ 980.941835][T22325] hsr_slave_0: entered promiscuous mode [ 980.950078][T22325] hsr_slave_1: entered promiscuous mode [ 981.311418][T22325] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 981.328513][T22325] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 981.342681][T22325] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 981.363373][T22325] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 981.373236][T22393] can: request_module (can-proto-0) failed. [ 981.740915][T22413] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 981.846417][T22325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.916348][T22325] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.950597][T17347] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.957858][T17347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.971591][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.978881][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.286605][T22325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.528759][T22325] veth0_vlan: entered promiscuous mode [ 982.541854][T22325] veth1_vlan: entered promiscuous mode [ 982.597690][T22325] veth0_macvtap: entered promiscuous mode [ 982.611943][T22325] veth1_macvtap: entered promiscuous mode [ 982.652011][T22325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.675937][T22325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.718536][ T202] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.727308][ T202] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.769830][ T202] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.785179][ T202] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.920085][T17347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.940451][T17347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.974192][T15592] Bluetooth: hci1: command tx timeout [ 982.985739][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.993796][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.079103][T22449] net_ratelimit: 18 callbacks suppressed [ 983.079122][T22449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.204168][T22454] smb3: Unknown parameter 'acl' [ 985.126184][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 985.135578][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 985.197823][T15592] Bluetooth: hci1: command tx timeout [ 985.585027][T22472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4499'. [ 985.594173][T22472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4499'. [ 985.965662][T22467] tipc: Started in network mode [ 985.974742][T22467] tipc: Node identity 7270be3a4f16, cluster identity 4711 [ 985.990872][T22467] tipc: Enabled bearer , priority 0 [ 987.044425][T22487] netlink: 'syz.0.4502': attribute type 10 has an invalid length. [ 987.052634][T22487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4502'. [ 987.091155][T22487] batadv0: entered promiscuous mode [ 987.096403][T22487] batadv0: entered allmulticast mode [ 987.122774][T22487] bridge0: port 3(batadv0) entered blocking state [ 987.147280][T22487] bridge0: port 3(batadv0) entered disabled state [ 987.189993][T22487] bridge0: port 3(batadv0) entered blocking state [ 987.196636][T22487] bridge0: port 3(batadv0) entered forwarding state [ 987.231193][T21040] tipc: Node number set to 1030143546 [ 987.427024][T15592] Bluetooth: hci1: command tx timeout [ 987.593533][T13720] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 987.625275][ T202] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 987.634539][ T202] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 987.791296][T13720] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 987.802750][T13720] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 987.824952][T13720] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 987.849321][T13720] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.861423][T22493] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 987.879136][T13720] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 988.122987][T13720] usb 10-1: USB disconnect, device number 2 [ 988.226514][T22466] tipc: Disabling bearer [ 988.253258][T22505] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.4506'. [ 988.515816][T22511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 988.522409][T22511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 988.531492][T22511] vhci_hcd vhci_hcd.0: Device attached [ 988.555192][T22511] vhci_hcd vhci_hcd.0: port 0 already used [ 988.839428][T20682] usb 34-1: SetAddress Request (2) to port 0 [ 988.853865][T20682] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 989.220672][T22515] vhci_hcd: connection reset by peer [ 989.246157][ T6080] vhci_hcd vhci_hcd.0: stop threads [ 989.253789][ T6080] vhci_hcd vhci_hcd.0: release socket [ 989.274587][ T6080] vhci_hcd vhci_hcd.0: disconnect device [ 989.550054][T21040] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 989.730025][T21040] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.752303][T21040] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 989.761302][T21040] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 989.789499][T21040] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.800959][T21040] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 989.810195][T21040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.840074][T21040] hub 10-1:1.0: bad descriptor, ignoring hub [ 989.846123][T21040] hub 10-1:1.0: probe with driver hub failed with error -5 [ 989.856677][T21040] cdc_wdm 10-1:1.0: skipping garbage [ 989.862688][T21040] cdc_wdm 10-1:1.0: skipping garbage [ 989.877841][T21040] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 989.884939][T21040] cdc_wdm 10-1:1.0: Unknown control protocol [ 990.067746][T22542] IPVS: persistence engine module ip_vs_pe_ not found [ 990.169581][T13720] usb 10-1: USB disconnect, device number 3 [ 990.228041][T22545] netlink: 'syz.0.4518': attribute type 27 has an invalid length. [ 991.388182][T21040] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 991.560032][T21040] usb 10-1: Using ep0 maxpacket: 16 [ 991.567500][T21040] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.579020][T21040] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.589059][T21040] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 991.605079][T21040] usb 10-1: config 0 interface 0 has no altsetting 0 [ 991.611809][T21040] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 991.621218][T21040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.633764][T21040] usb 10-1: config 0 descriptor?? [ 992.287285][T22558] ALSA: mixer_oss: invalid index 276447232 [ 992.294395][ T5879] usb 10-1: USB disconnect, device number 4 [ 992.975373][T22576] overlayfs: empty lowerdir [ 993.964790][T13719] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 994.146532][T13719] usb 10-1: Using ep0 maxpacket: 32 [ 994.159331][T13719] usb 10-1: config 2 has an invalid interface number: 230 but max is 0 [ 994.167634][T13719] usb 10-1: config 2 has no interface number 0 [ 994.195357][T13719] usb 10-1: config 2 interface 230 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 994.217157][T13719] usb 10-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 994.226710][T13719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.249467][T22599] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 994.276029][T20682] usb 34-1: device descriptor read/8, error -110 [ 994.493660][T13719] usb 10-1: string descriptor 0 read error: -71 [ 994.520481][T13719] cypress_m8 10-1:2.230: HID->COM RS232 Adapter converter detected [ 994.535636][T13719] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 994.568405][T13719] usb 10-1: USB disconnect, device number 5 [ 994.590487][T13719] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 994.623384][T13719] cypress_m8 10-1:2.230: device disconnected [ 994.716372][T20682] usb usb34-port1: attempt power cycle [ 995.337972][T20682] usb usb34-port1: unable to enumerate USB device [ 995.715133][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 996.217890][T22671] KVM: debugfs: duplicate directory 22671-5 [ 998.740751][T22648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 999.155017][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 999.167723][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.182913][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 999.197333][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 999.207576][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 999.601840][T22696] chnl_net:caif_netlink_parms(): no params data found [ 999.670708][T17347] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.780025][T17347] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.798010][T22696] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.805485][T22696] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.812748][T22696] bridge_slave_0: entered allmulticast mode [ 999.820583][T22696] bridge_slave_0: entered promiscuous mode [ 999.848161][T17347] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.883123][T22696] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.900041][T22696] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.907644][T22696] bridge_slave_1: entered allmulticast mode [ 999.921573][T22696] bridge_slave_1: entered promiscuous mode [ 999.957202][T17347] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.972062][T22728] macsec0: entered allmulticast mode [ 999.977836][T22728] veth1_macvtap: entered allmulticast mode [ 1000.009754][T22696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.025771][T22696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.067050][T22696] team0: Port device team_slave_0 added [ 1000.077849][T22696] team0: Port device team_slave_1 added [ 1000.140436][T22730] F2FS-fs: Conflicting test_dummy_encryption options [ 1000.163827][T22696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.174554][T22696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.202299][T22696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.240470][T22696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.255500][T22696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.281665][T22696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.389733][T17347] veth0: left allmulticast mode [ 1000.411948][T17347] veth0: left promiscuous mode [ 1000.416909][T17347] bridge0: port 3(veth0) entered disabled state [ 1000.437753][T17347] bridge_slave_1: left allmulticast mode [ 1000.443452][T17347] bridge_slave_1: left promiscuous mode [ 1000.456846][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.469137][ T29] audit: type=1326 audit(1771719374.805:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.9.4554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f652d99c629 code=0x0 [ 1000.495900][T17347] bridge_slave_0: left allmulticast mode [ 1000.502014][T17347] bridge_slave_0: left promiscuous mode [ 1000.508852][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.907600][T17347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.925785][T17347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.947990][T17347] bond0 (unregistering): Released all slaves [ 1000.970326][T22696] hsr_slave_0: entered promiscuous mode [ 1000.977924][T22696] hsr_slave_1: entered promiscuous mode [ 1000.985770][T22696] debugfs: 'hsr0' already exists in 'hsr' [ 1000.992775][T22696] Cannot create hsr debugfs directory [ 1001.128166][T13726] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1001.288716][T13726] usb 10-1: Using ep0 maxpacket: 8 [ 1001.334380][T13726] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1001.356350][T13726] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1001.367074][T13726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1001.378549][T13726] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1001.400283][T13726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1001.411929][T13726] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.426936][T17347] hsr_slave_0: left promiscuous mode [ 1001.427661][T13726] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1001.441545][T17347] hsr_slave_1: left promiscuous mode [ 1001.446941][T13726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.456059][ T5149] Bluetooth: hci4: command tx timeout [ 1001.456256][T17347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.477995][T13726] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 1001.488493][T17347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.513757][T17347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.521361][T17347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.541820][T17347] veth1_macvtap: left promiscuous mode [ 1001.548307][T17347] veth0_macvtap: left promiscuous mode [ 1001.554224][T17347] veth1_vlan: left promiscuous mode [ 1001.559967][T17347] veth0_vlan: left promiscuous mode [ 1001.853791][T13726] usb 10-1: USB disconnect, device number 6 [ 1001.904349][T17347] team0 (unregistering): Port device team_slave_1 removed [ 1001.922615][T17347] team0 (unregistering): Port device team_slave_0 removed [ 1002.797576][T22804] QAT: Stopping all acceleration devices. [ 1003.030857][T22696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1003.059608][T22696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1003.084500][T22696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1003.110935][T22696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1003.337485][T22696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.431458][T22696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.498595][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.505802][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.525183][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.532446][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.666235][T22696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.676996][ T5149] Bluetooth: hci4: command tx timeout [ 1003.999994][T22696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.090322][T22696] veth0_vlan: entered promiscuous mode [ 1004.113283][T22696] veth1_vlan: entered promiscuous mode [ 1004.161024][T22696] veth0_macvtap: entered promiscuous mode [ 1004.182448][T22696] veth1_macvtap: entered promiscuous mode [ 1004.221800][T22696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.244844][T22696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.268358][ T6080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.286094][ T6080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.297834][ T6080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.310015][ T6080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.437261][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.458158][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.519968][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.527903][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.962930][T22884] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1005.780551][T22915] syzkaller1: entered promiscuous mode [ 1005.788989][T22915] syzkaller1: entered allmulticast mode [ 1005.896790][ T5149] Bluetooth: hci4: command tx timeout [ 1006.131989][T22604] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1006.287872][T22938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.298510][T22938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.332069][T22604] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.374146][T22604] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1006.392077][T22604] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.402043][T22604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.407083][T22944] netlink: 'syz.9.4578': attribute type 22 has an invalid length. [ 1006.411428][T22604] usb 2-1: Product: syz [ 1006.423627][T22604] usb 2-1: Manufacturer: syz [ 1006.426121][T22944] netlink: 14380 bytes leftover after parsing attributes in process `syz.9.4578'. [ 1006.428282][T22604] usb 2-1: SerialNumber: syz [ 1006.460935][T22604] cdc_mbim 2-1:1.0: skipping garbage [ 1006.679194][T22953] No source specified [ 1006.689762][T22915] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1006.865359][T22961] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1006.883366][T22963] netlink: 172 bytes leftover after parsing attributes in process `syz.9.4581'. [ 1006.902871][T22961] qnx6: wrong signature (magic) in superblock #1. [ 1006.914211][T22961] qnx6: unable to read the first superblock [ 1006.947314][T22963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.973386][T22963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.196088][T20714] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1007.329854][T22983] af_packet: tpacket_rcv: packet too big, clamped from 4032 to 4294967272. macoff=96 [ 1007.352655][T22915] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1007.383607][T22604] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 1007.391408][T20714] usb 10-1: config 254 has an invalid interface number: 66 but max is 0 [ 1007.431804][T20714] usb 10-1: config 254 has no interface number 0 [ 1007.534841][T20714] usb 10-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= 0.00 [ 1007.594442][T20714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.606967][T22915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.662588][T22915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.672116][T20714] usb 10-1: Product: syz [ 1007.703553][T20714] usb 10-1: Manufacturer: syz [ 1007.720451][T22915] pvfs2: Unknown parameter 'aՁn' [ 1007.733236][T20714] usb 10-1: SerialNumber: syz [ 1007.777714][T22604] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1007.793920][T20714] hso 10-1:254.66: Not our interface [ 1007.802597][T22604] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1007.821704][T20714] usb-storage 10-1:254.66: USB Mass Storage device detected [ 1007.858555][T22604] wwan wwan0: port wwan0mbim0 attached [ 1007.957781][T22604] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 96:1e:f4:a2:ad:f9 [ 1007.989685][T20714] usb 10-1: USB disconnect, device number 7 [ 1008.049320][T22604] usb 2-1: USB disconnect, device number 89 [ 1008.090354][T22604] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1008.121846][ T5149] Bluetooth: hci4: command tx timeout [ 1008.146705][T22604] wwan wwan0: port wwan0mbim0 disconnected [ 1009.168366][T21040] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1009.339483][T21040] usb 2-1: Using ep0 maxpacket: 8 [ 1009.360500][T21040] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1009.371369][T21040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.379853][T21040] usb 2-1: Product: syz [ 1009.390183][T21040] usb 2-1: Manufacturer: syz [ 1009.398913][T21040] usb 2-1: SerialNumber: syz [ 1009.407282][T21040] usb 2-1: config 0 descriptor?? [ 1009.420376][T21040] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1009.638551][T23076] vivid-000: disconnect [ 1009.657969][T23076] overlay: ./file1 is not a directory [ 1009.671766][T23075] vivid-000: reconnect [ 1009.860833][T23050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.880841][T23050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.901455][T23088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.914795][T23050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.931197][T23088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.941661][T23050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.967587][T21040] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1009.991203][T21040] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1010.010458][T21040] usb 2-1: USB disconnect, device number 90 [ 1010.095987][T23091] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 1010.857614][T20714] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1011.039357][T20714] usb 2-1: Using ep0 maxpacket: 8 [ 1011.046470][T20714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1011.062834][T20714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1011.073053][T20714] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1011.102077][T20714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1011.127889][T20714] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1011.152805][T23139] autofs: Bad value for 'fd' [ 1011.164522][T20714] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1011.184574][T20714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.215157][T20714] usb 2-1: config 0 descriptor?? [ 1011.232277][T23118] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1011.478490][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.479014][ C1] Bluetooth: hci0: Unexpected continuation: 1 bytes [ 1011.485603][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.509941][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.516845][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.524086][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.530940][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.537953][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.545893][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.553575][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.560451][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.568305][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.575455][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.582324][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.589381][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.596488][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.603336][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.610241][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.617251][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.624091][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.631105][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.638023][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.644851][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.654018][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.661105][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.667971][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.675838][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.682739][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.689608][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.697185][T15592] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1011.745423][T23118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.754464][T23118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.776751][T23118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.033719][T21040] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1012.194046][T21040] usb 10-1: Using ep0 maxpacket: 8 [ 1012.201381][T21040] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1012.210296][T21040] usb 10-1: config 5 has an invalid interface number: 77 but max is 0 [ 1012.218612][T21040] usb 10-1: config 5 has no interface number 0 [ 1012.225065][T21040] usb 10-1: config 5 interface 77 has no altsetting 0 [ 1012.234652][T21040] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=31.25 [ 1012.244024][T21040] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.252279][T21040] usb 10-1: Product: syz [ 1012.256650][T21040] usb 10-1: Manufacturer: syz [ 1012.261618][T21040] usb 10-1: SerialNumber: syz [ 1012.377343][T23162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1012.488916][T23158] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.495447][T23158] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.517617][T23166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.524581][T21040] kalmia 10-1:5.77: probe with driver kalmia failed with error -22 [ 1012.532005][T21040] usb 10-1: USB disconnect, device number 8 [ 1012.552057][T23166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.453897][T23181] 9p: Bad value for 'rfdno' [ 1013.509202][ T5149] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1013.862523][T13719] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1014.039122][T13719] usb 10-1: Using ep0 maxpacket: 32 [ 1014.059047][T13719] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.078751][T13719] usb 10-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1014.097192][T13719] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1014.103934][T13719] usb 10-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=11.00 [ 1014.120780][T13719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.134537][T13719] usb 10-1: config 0 descriptor?? [ 1014.267806][T23205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4624'. [ 1014.369030][T13719] usb 10-1: string descriptor 0 read error: -71 [ 1014.380190][T13719] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input108 [ 1014.393258][ T5185] bcm5974 10-1:0.0: could not read from device [ 1014.409087][ T5185] bcm5974 10-1:0.0: could not read from device [ 1014.416440][T13719] usb 10-1: USB disconnect, device number 9 [ 1014.449680][T17904] udevd[17904]: Error opening device "/dev/input/event4": No such file or directory [ 1014.469334][T17904] udevd[17904]: Unable to EVIOCGABS device "/dev/input/event4" [ 1014.478042][T17904] udevd[17904]: Unable to EVIOCGABS device "/dev/input/event4" [ 1014.495254][T17904] udevd[17904]: Unable to EVIOCGABS device "/dev/input/event4" [ 1014.503163][T17904] udevd[17904]: Unable to EVIOCGABS device "/dev/input/event4" [ 1014.511599][T17904] udevd[17904]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1014.552309][ T5200] udevd[5200]: worker [17904] terminated by signal 6 (Aborted) [ 1014.560089][ T5200] udevd[5200]: worker [17904] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input108/event4' [ 1014.976394][T23233] fuse: Bad value for 'user_id' [ 1014.981699][T23233] fuse: Bad value for 'user_id' [ 1015.131955][T23238] veth1_to_bridge: entered promiscuous mode [ 1015.146342][T23238] veth1_to_bridge: left promiscuous mode [ 1015.200665][T23242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.210634][T23242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.243961][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1015.254938][T23244] fuse: Unknown parameter '0x000000000000000d' [ 1015.262834][T23244] fuse: Unknown parameter '' [ 1015.316050][T20714] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1015.454976][T20714] usb 10-1: device descriptor read/64, error -71 [ 1015.735120][T20714] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1015.889063][T23256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.898983][T20714] usb 10-1: device descriptor read/64, error -71 [ 1015.906398][T23256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.919810][T23256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.928928][T23256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.021959][T20714] usb usb10-port1: attempt power cycle [ 1016.199931][T23248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.385285][T20714] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1016.407113][T20714] usb 10-1: device descriptor read/8, error -71 [ 1016.675915][T20714] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1016.702663][T20714] usb 10-1: device descriptor read/8, error -71 [ 1016.824718][T20714] usb usb10-port1: unable to enumerate USB device [ 1017.583657][T23278] dvmrp1: entered allmulticast mode [ 1017.593500][T23278] dvmrp1: left allmulticast mode [ 1018.355867][T13723] hid_parser_main: 33 callbacks suppressed [ 1018.355887][T13723] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1018.372576][T13723] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1018.420624][T23293] fido_id[23293]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1018.512035][T23249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1018.643580][T13723] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1018.822939][T13723] usb 10-1: Using ep0 maxpacket: 32 [ 1018.829624][T13723] usb 10-1: config 0 has an invalid interface number: 219 but max is 0 [ 1018.838160][T13723] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.848485][T13723] usb 10-1: config 0 has no interface number 0 [ 1018.856682][T13723] usb 10-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 1018.865965][T13723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.874064][T13723] usb 10-1: Product: syz [ 1018.878403][T13723] usb 10-1: Manufacturer: syz [ 1018.883091][T13723] usb 10-1: SerialNumber: syz [ 1018.890999][T13723] usb 10-1: config 0 descriptor?? [ 1018.898595][T13723] hub 10-1:0.219: bad descriptor, ignoring hub [ 1018.905069][T13723] hub 10-1:0.219: probe with driver hub failed with error -5 [ 1018.913333][T13723] option 10-1:0.219: GSM modem (1-port) converter detected [ 1019.163208][T23306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.174767][T23306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.240268][T13723] usb 10-1: USB disconnect, device number 14 [ 1019.247274][T13723] option 10-1:0.219: device disconnected [ 1019.758968][T23310] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4654'. [ 1019.802154][T23312] program syz.1.4655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.966942][T20714] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1020.127222][T20714] usb 10-1: Using ep0 maxpacket: 16 [ 1020.134433][T20714] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.144928][T20714] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1020.156140][T20714] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.167137][T20714] usb 10-1: config 1 interface 2 has no altsetting 0 [ 1020.176389][T20714] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.185727][T20714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.193833][T20714] usb 10-1: Product: syz [ 1020.198065][T20714] usb 10-1: Manufacturer: syz [ 1020.202772][T20714] usb 10-1: SerialNumber: syz [ 1020.427074][T23308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.437511][T23308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.447136][T20714] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1020.466400][T20714] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1020.475661][T20714] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 1020.483552][T20714] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1020.492146][T20714] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1020.500686][T20714] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 1020.511937][T20714] usb 10-1: selecting invalid altsetting 0 [ 1020.514895][T23322] batadv_slave_1: entered promiscuous mode [ 1020.518523][T20714] usb 10-1: selecting invalid altsetting 0 [ 1020.526815][T23322] batadv_slave_1: left promiscuous mode [ 1020.582027][T20714] usb 10-1: USB disconnect, device number 15 [ 1020.633512][T17978] udevd[17978]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.656632][T23325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.668410][T23325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.096998][T23334] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4662'. [ 1021.399544][T13723] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1021.538588][T13723] usb 10-1: device descriptor read/64, error -71 [ 1021.773530][ T29] audit: type=1326 audit(1771719394.727:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23337 comm="syz.1.4664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa62f59c629 code=0x0 [ 1021.795200][T13723] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1021.945030][T13723] usb 10-1: device descriptor read/64, error -71 [ 1022.065307][T13723] usb usb10-port1: attempt power cycle [ 1022.436673][T13723] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1022.470236][T13723] usb 10-1: device descriptor read/8, error -71 [ 1022.725501][T13723] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1022.753619][T13723] usb 10-1: device descriptor read/8, error -71 [ 1022.886125][T13723] usb usb10-port1: unable to enumerate USB device [ 1024.444983][T23389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.644303][T23395] ISOFS: Unable to identify CD-ROM format. [ 1024.795490][T23401] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 1024.851409][T23404] input: syz0 as /devices/virtual/input/input110 [ 1024.919787][T23406] autofs: Unknown parameter 'gd' [ 1025.051015][T23410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.061769][T23410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.187039][T22339] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1025.267254][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.277163][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.295607][T23417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.297740][T23419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.323233][T23412] comedi comedi3: comedi_config --init_data is deprecated [ 1025.367956][T22339] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1025.377771][T22339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.389488][T22339] usb 10-1: config 0 descriptor?? [ 1025.671247][T23424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.680743][T23424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.001497][T23439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.017412][T23439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.280047][T23455] kAFS: Can only specify source 'none' with -o dyn [ 1026.401481][T23462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1026.472763][T22339] pegasus 10-1:0.0: probe with driver pegasus failed with error -121 [ 1026.568427][T23474] sg_read: process 137 (syz.1.4695) changed security contexts after opening file descriptor, this is not allowed. [ 1026.690908][T13723] usb 10-1: USB disconnect, device number 20 [ 1028.007086][T13723] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1028.167439][T13723] usb 10-1: Using ep0 maxpacket: 16 [ 1028.175461][T13723] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.186136][T13723] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1028.201058][T13723] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.210820][T13723] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1028.218926][T13723] usb 10-1: SerialNumber: syz [ 1028.452722][T20714] usb 10-1: USB disconnect, device number 21 [ 1028.623824][T23506] netlink: 'syz.1.4703': attribute type 1 has an invalid length. [ 1028.754062][T23511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.771394][T23511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.784702][T23511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.796080][T23511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.810111][T23515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.826941][T23515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.921222][T23518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.932832][T23518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.262012][T23526] overlayfs: missing 'lowerdir' [ 1029.349723][ T29] audit: type=1326 audit(1771719401.817:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23527 comm="syz.9.4711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f652d99c629 code=0x0 [ 1029.553264][T23540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1029.567606][T23539] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 1029.771549][T23544] /dev/nullb0: Can't open blockdev [ 1029.780608][T23545] /dev/nullb0: Can't open blockdev [ 1029.820683][T23547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4717'. [ 1029.832718][T23547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4717'. [ 1029.873190][T23549] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4718'. [ 1029.882586][T23550] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4718'. [ 1029.926076][ T29] audit: type=1326 audit(1771719402.350:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23551 comm="syz.0.4719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9638f9c629 code=0x0 [ 1030.729551][T20714] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1030.915408][T20714] usb 10-1: Using ep0 maxpacket: 16 [ 1030.974707][T20714] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1031.021635][T20714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.068449][T20714] usb 10-1: Product: syz [ 1031.091635][T20714] usb 10-1: Manufacturer: syz [ 1031.118157][T20714] usb 10-1: SerialNumber: syz [ 1031.206477][T20714] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1031.251647][T20714] r8152-cfgselector 10-1: config 0 descriptor?? [ 1031.490710][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.508525][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.519481][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.544532][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.555603][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.567945][T23573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.578605][T23573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.586542][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.608918][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.619899][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.630684][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.641066][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.887645][T22339] r8152-cfgselector 10-1: USB disconnect, device number 22 [ 1031.998486][T23584] tipc: Started in network mode [ 1032.003612][T23584] tipc: Node identity 84e, cluster identity 4711 [ 1032.010591][T23584] tipc: Node number set to 2126 [ 1032.355463][T23598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.366682][T23598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.029323][T23608] loop6: detected capacity change from 0 to 2640 [ 1033.037460][T23608] buffer_io_error: 27 callbacks suppressed [ 1033.037494][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.051391][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.059902][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.067839][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.076552][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.084518][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.092706][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.100668][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.108588][T23608] ldm_validate_partition_table(): Disk read failed. [ 1033.136309][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.145516][T23609] loop6: detected capacity change from 2640 to 524288000 [ 1033.155888][T23608] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.166032][T23608] Dev loop6: unable to read RDB block 0 [ 1033.179641][T23608] loop6: unable to read partition table [ 1033.187802][T23608] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 1033.192867][T22339] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1033.274963][T23614] netlink: 'syz.1.4737': attribute type 1 has an invalid length. [ 1033.282974][T23614] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1033.293632][T23614] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1033.307372][T23614] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1033.387749][T22339] usb 10-1: Using ep0 maxpacket: 16 [ 1033.403278][T22339] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.420788][T22339] usb 10-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 1033.441083][T22339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.466817][T22339] usb 10-1: config 0 descriptor?? [ 1033.480627][T22339] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input111 [ 1033.688890][ T5185] bcm5974 10-1:0.0: could not read from device [ 1033.701340][T23628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.710769][ T5185] bcm5974 10-1:0.0: could not read from device [ 1033.721037][T22339] usb 10-1: USB disconnect, device number 23 [ 1033.763760][T23628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.803241][T23628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.811926][T23628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.824361][T23628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4741'. [ 1033.839127][T23631] EXT4-fs: Conflicting test_dummy_encryption options [ 1034.315969][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4744'. [ 1034.325010][T23636] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1034.451992][T23640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input112 [ 1034.591497][T23646] openvswitch: netlink: Message has -2 unknown bytes. [ 1034.639808][T23649] netlink: 'syz.9.4748': attribute type 1 has an invalid length. [ 1034.654025][T23649] netlink: 'syz.9.4748': attribute type 3 has an invalid length. [ 1034.661872][T23649] netlink: 'syz.9.4748': attribute type 8 has an invalid length. [ 1034.670659][T23649] netlink: 172 bytes leftover after parsing attributes in process `syz.9.4748'. [ 1034.679807][T23649] NCSI netlink: No device for ifindex 131092 [ 1034.739706][T23651] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1034.783771][T23655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.793607][T23655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.988887][T22339] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1035.022377][T23657] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4752'. [ 1035.172865][T22339] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1035.183250][T22339] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1035.195403][T22339] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1035.209434][T22339] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1035.219411][T22339] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.227973][T22339] usb 10-1: Product: syz [ 1035.232364][T22339] usb 10-1: Manufacturer: syz [ 1035.237169][T22339] usb 10-1: SerialNumber: syz [ 1035.244267][T22339] usb 10-1: config 0 descriptor?? [ 1035.250793][T23653] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1035.258336][T23653] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1035.266751][T22339] usb 10-1: ucan: probing device on interface #0 [ 1035.414875][T23669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.424009][T23669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.486262][T23653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.495168][T23653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.941482][T22339] ucan 10-1:0.0 can0: registered device [ 1036.070479][T23677] netlink: 'syz.1.4758': attribute type 10 has an invalid length. [ 1036.089819][T23677] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1036.155028][T22339] ucan 10-1:0.0 can0: firmware string: unknown [ 1036.169036][T23680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1036.175587][T23680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1036.189339][T23680] vhci_hcd vhci_hcd.0: Device attached [ 1036.389488][T22339] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1036.453604][T22339] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1036.532885][T23703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.545947][T23703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.633859][ T5495] ucan 10-1:0.0 can0: bit-timing not yet defined [ 1036.848879][ T5495] ucan 10-1:0.0 can0: could not stop device, code: -71 [ 1036.855408][ T9749] usb 10-1: USB disconnect, device number 24 [ 1036.859809][ T5495] ucan 10-1:0.0 can0: could not reset device, code: -19 [ 1036.935319][T23708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.970904][T23708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.249803][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1037.617010][T23742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.656947][T23745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.666911][T23745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.685097][T23746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.697089][T23745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.705789][T23745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.713605][T23746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.981581][T23751] netlink: 'syz.1.4771': attribute type 10 has an invalid length. [ 1038.040026][T23752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.049988][T23752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.496686][T20714] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1038.631385][T23768] ALSA: mixer_oss: invalid OSS volume 'I6U_h"B' [ 1038.681395][T20714] usb 10-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=30.20 [ 1038.691562][T20714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.700102][T20714] usb 10-1: Product: syz [ 1038.704508][T20714] usb 10-1: Manufacturer: syz [ 1038.709295][T20714] usb 10-1: SerialNumber: syz [ 1038.721581][T20714] usb 10-1: config 0 descriptor?? [ 1038.888948][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4778'. [ 1039.208288][T23786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.217712][T23786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.230200][T23786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.239733][T23786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.326638][T23682] vhci_hcd: connection reset by peer [ 1039.333759][T23002] vhci_hcd vhci_hcd.4: stop threads [ 1039.351465][T23002] vhci_hcd vhci_hcd.4: release socket [ 1039.356980][T23002] vhci_hcd vhci_hcd.4: disconnect device [ 1039.382893][T23789] overlay: Unknown parameter 'appraise' [ 1039.384906][T20682] usb 10-1: USB disconnect, device number 25 [ 1039.408099][T20682] f81534a_ctrl 10-1:0.0: failed to enable ports: -19 [ 1039.499417][T23795] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1039.835843][T23820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.847004][T23820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.859159][T23822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.874101][T23822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.931331][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.954110][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.004502][T23828] netlink: 'syz.9.4795': attribute type 1 has an invalid length. [ 1040.334807][T20682] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1040.507575][T20682] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.518218][T20682] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.528838][T20682] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1040.538984][T20682] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1040.547100][T20682] usb 10-1: SerialNumber: syz [ 1040.636015][T23854] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1040.644366][T23000] Bluetooth: hci5: Frame reassembly failed (-84) [ 1040.778545][T20682] usb 10-1: 0:2 : does not exist [ 1040.812849][T20682] usb 10-1: USB disconnect, device number 26 [ 1040.839750][T20485] udevd[20485]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.896358][T22339] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1042.848417][T15592] Bluetooth: hci5: command 0x1003 tx timeout [ 1042.848682][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1043.308479][T23890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.334356][T23890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.407611][T23883] binder: Bad value for 'max' [ 1043.513478][T23893] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000) [ 1156.088168][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1156.095145][ C1] rcu: 0-...!: (1 GPs behind) idle=a55c/1/0x4000000000000000 softirq=148864/148864 fqs=3 [ 1156.106586][ C1] rcu: (detected by 1, t=10502 jiffies, g=156653, q=264 ncpus=2) [ 1156.114410][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1156.114440][ C0] NMI backtrace for cpu 0 [ 1156.114458][ C0] CPU: 0 UID: 0 PID: 23895 Comm: syz.9.4817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.114480][ C0] Tainted: [L]=SOFTLOCKUP [ 1156.114486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1156.114496][ C0] RIP: 0010:_find_first_zero_bit+0x0/0xb0 [ 1156.114519][ C0] Code: fc ff df 80 3c 08 00 74 86 e8 7c b1 76 fd e9 7c ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 54 53 48 85 f6 74 46 48 89 f3 49 [ 1156.114532][ C0] RSP: 0018:ffffc90003457c70 EFLAGS: 00000046 [ 1156.114546][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000 [ 1156.114557][ C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff888068ef97d0 [ 1156.114568][ C0] RBP: ffff888068ef97d0 R08: 1ffff1100d1df1a9 R09: 0000000000000000 [ 1156.114578][ C0] R10: ffff888068ef8e8c R11: fffff5200068af80 R12: 0000000080000000 [ 1156.114589][ C0] R13: 1ffffffff1c59fd3 R14: 0000000000000002 R15: ffff888068ef8c40 [ 1156.114599][ C0] FS: 00007f652bbf66c0(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000 [ 1156.114612][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1156.114623][ C0] CR2: 00007f652bbd4ff8 CR3: 000000008f37c000 CR4: 00000000003526f0 [ 1156.114636][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1156.114646][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1156.114657][ C0] Call Trace: [ 1156.114664][ C0] [ 1156.114670][ C0] sched_mm_cid_fork+0x592/0xc80 [ 1156.114700][ C0] bprm_execve+0xda1/0x1460 [ 1156.114721][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1156.114737][ C0] ? alloc_bprm+0x508/0x5c0 [ 1156.114750][ C0] ? count+0x1cb/0x230 [ 1156.114765][ C0] do_execveat_common+0x50d/0x690 [ 1156.114783][ C0] __x64_sys_execveat+0xc7/0xf0 [ 1156.114800][ C0] do_syscall_64+0x14d/0xf80 [ 1156.114815][ C0] ? trace_irq_disable+0x3b/0x150 [ 1156.114835][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.114850][ C0] ? clear_bhb_loop+0x40/0x90 [ 1156.114866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.114880][ C0] RIP: 0033:0x7f652d99c629 [ 1156.114896][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.114916][ C0] RSP: 002b:00007f652bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1156.114931][ C0] RAX: ffffffffffffffda RBX: 00007f652dc15fa0 RCX: 00007f652d99c629 [ 1156.114942][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1156.114952][ C0] RBP: 00007f652da32b39 R08: 0000000000001000 R09: 0000000000000000 [ 1156.114961][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.114971][ C0] R13: 00007f652dc16038 R14: 00007f652dc15fa0 R15: 00007fffc12e0528 [ 1156.114988][ C0] [ 1156.115432][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g156653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1156.411732][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1156.421688][ C1] rcu: RCU grace-period kthread stack dump: [ 1156.427558][ C1] task:rcu_preempt state:R running task stack:27664 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1156.441030][ C1] Call Trace: [ 1156.444294][ C1] [ 1156.447214][ C1] __schedule+0x1585/0x5340 [ 1156.451735][ C1] ? __pfx___schedule+0x10/0x10 [ 1156.456585][ C1] ? schedule+0x90/0x360 [ 1156.460821][ C1] schedule+0x164/0x360 [ 1156.464970][ C1] schedule_timeout+0x158/0x2c0 [ 1156.469813][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1156.475177][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1156.480480][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1156.486322][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1156.491879][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1156.496738][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1156.502887][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1156.508177][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1156.513396][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.519224][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1156.523833][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1156.529041][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.534861][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1156.539800][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1156.544932][ C1] kthread+0x388/0x470 [ 1156.549014][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1156.554208][ C1] ? __pfx_kthread+0x10/0x10 [ 1156.558791][ C1] ret_from_fork+0x51e/0xb90 [ 1156.563379][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1156.568482][ C1] ? __switch_to+0xc7d/0x1450 [ 1156.573156][ C1] ? __pfx_kthread+0x10/0x10 [ 1156.577739][ C1] ret_from_fork_asm+0x1a/0x30 [ 1156.582506][ C1] [ 1156.585516][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1156.591829][ C1] CPU: 1 UID: 0 PID: 23000 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.602943][ C1] Tainted: [L]=SOFTLOCKUP [ 1156.607266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1156.617314][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1156.623818][ C1] RIP: 0010:unwind_next_frame+0xd6d/0x23c0 [ 1156.629618][ C1] Code: 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f 85 51 11 00 00 41 83 3e 00 0f 95 c0 49 39 df 0f 96 c1 20 c1 49 39 dc 0f 97 c0 <20> c8 3c 01 75 18 48 8d 43 08 4c 39 f8 0f 97 c1 4c 39 e0 0f 96 c0 [ 1156.649213][ C1] RSP: 0018:ffffc90000a07a98 EFLAGS: 00000216 [ 1156.655273][ C1] RAX: 0000000000000001 RBX: ffffc90000a08fd8 RCX: 1ffff92000140f01 [ 1156.663232][ C1] RDX: ffffffff90c9d5b2 RSI: 0000000000000002 RDI: ffffffff8c2a0aa0 [ 1156.671196][ C1] RBP: 1ffff92000140f6e R08: 0000000000000001 R09: ffffffff8e9602e0 [ 1156.679157][ C1] R10: ffffc90000a07bb8 R11: ffffffff81b11670 R12: ffffc90000a09000 [ 1156.687123][ C1] R13: 1ffff92000140f6f R14: ffffc90000a07b68 R15: ffffc90000a01000 [ 1156.695083][ C1] FS: 0000000000000000(0000) GS:ffff8881250ff000(0000) knlGS:0000000000000000 [ 1156.704000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1156.710570][ C1] CR2: 00007f652d9e9d40 CR3: 000000000e74c000 CR4: 00000000003526f0 [ 1156.718530][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1156.726489][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1156.734447][ C1] Call Trace: [ 1156.737713][ C1] [ 1156.740548][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1156.745656][ C1] ? handle_softirqs+0x22a/0x870 [ 1156.750589][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1156.756739][ C1] arch_stack_walk+0x11b/0x150 [ 1156.761503][ C1] ? handle_softirqs+0x22a/0x870 [ 1156.766437][ C1] stack_trace_save+0xa9/0x100 [ 1156.771191][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1156.776642][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1156.781764][ C1] kasan_save_track+0x3e/0x80 [ 1156.786447][ C1] ? kasan_save_track+0x3e/0x80 [ 1156.791299][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1156.796054][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 1156.801066][ C1] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 1156.807215][ C1] ? ieee80211_inform_bss+0x161/0x1160 [ 1156.812664][ C1] ? cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 1156.819068][ C1] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 1156.824965][ C1] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 1156.831217][ C1] ? ieee80211_bss_info_update+0x794/0xa40 [ 1156.837025][ C1] ? ieee80211_scan_rx+0x552/0xa40 [ 1156.842173][ C1] ? ieee80211_rx_list+0x29e5/0x3710 [ 1156.847467][ C1] ? ieee80211_rx_napi+0x1b1/0x3e0 [ 1156.852569][ C1] ? ieee80211_handle_queued_frames+0xe8/0x1e0 [ 1156.858796][ C1] ? tasklet_action_common+0x2da/0x4b0 [ 1156.864257][ C1] ? handle_softirqs+0x22a/0x870 [ 1156.869221][ C1] __kasan_kmalloc+0x93/0xb0 [ 1156.873805][ C1] __kmalloc_noprof+0x35c/0x760 [ 1156.878650][ C1] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 1156.884725][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1156.889761][ C1] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 1156.895656][ C1] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1156.900673][ C1] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1156.905686][ C1] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1156.910703][ C1] ? __kfree_rcu_sheaf+0x1ad/0x5d0 [ 1156.915801][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1156.920552][ C1] ? irq_exit_rcu+0x9/0x30 [ 1156.924967][ C1] ? cfg80211_update_known_bss+0x9bd/0x1590 [ 1156.930858][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1156.937180][ C1] ? cmp_bss+0x8b3/0xe80 [ 1156.941418][ C1] ieee80211_inform_bss+0x161/0x1160 [ 1156.946697][ C1] ? __cfg80211_bss_update+0x1027/0x2110 [ 1156.952322][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1156.958031][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1156.963081][ C1] ? __kmalloc_noprof+0x37d/0x760 [ 1156.968107][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1156.973816][ C1] cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 1156.980052][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1156.986729][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1156.991838][ C1] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 1156.997636][ C1] cfg80211_inform_bss_data+0x266/0x3c40 [ 1157.003270][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.008208][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.013143][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1157.019196][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1157.024308][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1157.029418][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1157.034550][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1157.039694][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1157.044821][ C1] ? unwind_next_frame+0x1aaf/0x23c0 [ 1157.050107][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.055055][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1157.059999][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 1157.066064][ C1] ? ieee80211_bss_info_update+0x316/0xa40 [ 1157.071866][ C1] ieee80211_bss_info_update+0x794/0xa40 [ 1157.077946][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1157.084115][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1157.089929][ C1] ieee80211_scan_rx+0x552/0xa40 [ 1157.094865][ C1] ieee80211_rx_list+0x29e5/0x3710 [ 1157.100006][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1157.105492][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.110440][ C1] ? lock_acquire+0xf0/0x2e0 [ 1157.115042][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1157.120067][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 1157.125089][ C1] ieee80211_rx_napi+0x1b1/0x3e0 [ 1157.130023][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1157.135479][ C1] ? skb_dequeue+0x124/0x160 [ 1157.140062][ C1] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 1157.146042][ C1] tasklet_action_common+0x2da/0x4b0 [ 1157.151344][ C1] handle_softirqs+0x22a/0x870 [ 1157.156119][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1157.160891][ C1] __irq_exit_rcu+0x5f/0x150 [ 1157.165563][ C1] irq_exit_rcu+0x9/0x30 [ 1157.169809][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1157.175477][ C1] [ 1157.178406][ C1] [ 1157.181330][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1157.187313][ C1] RIP: 0010:smp_call_function_many_cond+0xcea/0x12c0 [ 1157.193980][ C1] Code: 89 ee 83 e6 01 31 ff e8 04 e5 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 af e0 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 93 e0 0b 00 eb e4 44 [ 1157.213584][ C1] RSP: 0018:ffffc900056bf760 EFLAGS: 00000293 [ 1157.219641][ C1] RAX: 0000000000000000 RBX: 1ffff11017088515 RCX: ffff88807ae5bc80 [ 1157.227598][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1157.235565][ C1] RBP: ffffc900056bf8a0 R08: ffffffff9033cab7 R09: 1ffffffff2067956 [ 1157.243524][ C1] R10: dffffc0000000000 R11: fffffbfff2067957 R12: ffff8880b84428a8 [ 1157.251480][ C1] R13: dffffc0000000000 R14: ffff8880b853bf80 R15: 0000000000000000 [ 1157.259459][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1157.264483][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1157.270804][ C1] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 1157.276777][ C1] ? __pfx___text_poke+0x10/0x10 [ 1157.281716][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1157.286726][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1157.291826][ C1] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1157.297628][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1157.302642][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1157.308872][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1157.315111][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1157.321169][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 1157.327064][ C1] static_key_enable+0x1a/0x20 [ 1157.331818][ C1] toggle_allocation_gate+0xab/0x290 [ 1157.337188][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1157.343079][ C1] ? process_one_work+0x87c/0x1650 [ 1157.348224][ C1] ? process_one_work+0x87c/0x1650 [ 1157.353326][ C1] process_one_work+0x949/0x1650 [ 1157.358269][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1157.363635][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1157.368661][ C1] worker_thread+0xb46/0x1140 [ 1157.373345][ C1] kthread+0x388/0x470 [ 1157.377405][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1157.382520][ C1] ? __pfx_kthread+0x10/0x10 [ 1157.387108][ C1] ret_from_fork+0x51e/0xb90 [ 1157.391702][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.396815][ C1] ? __switch_to+0xc7d/0x1450 [ 1157.401481][ C1] ? __pfx_kthread+0x10/0x10 [ 1157.406072][ C1] ret_from_fork_asm+0x1a/0x30 [ 1157.410864][ C1]