last executing test programs: 13m14.81223717s ago: executing program 32 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x24) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x901, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c010}, 0x40) 11m38.513793159s ago: executing program 33 (id=467): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@noextend}], [{@permit_directio}]}}) (async) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@noextend}], [{@permit_directio}]}}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101180, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000002c00)={0x18, 0x0, r3, {0xa00000000000}}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000002c00)={0x18, 0x0, r3, {0xa00000000000}}, 0x18) 9m21.921578887s ago: executing program 34 (id=1133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r4, 0x11, 0x70bd2b, 0x25dfdbbd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000001a80)=0x25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x59b6557c3859a34c, &(0x7f00000004c0)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) r6 = fsopen(&(0x7f00000004c0)='smb3\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) 8m57.436534803s ago: executing program 35 (id=1204): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xc, 0x4000010, r0, 0x2000) 7m55.96177196s ago: executing program 6 (id=1468): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000200)=""/138, 0x8a}], 0x2, 0xf09c, 0x82a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9d647000) sendto$phonet(r0, &(0x7f00000000c0)="3d24bd02434b87869d1d5d8512ea701727ceeab6434d344e83edf52405100dbb5a2778a877aa8aec8bff282915437df14e5de2cea9c5b1da4e13a6518b18333fe8e25394c3977630f268f8a8248c2b3a8b3e9db4aba557788212578f5fc589a6c87193060d23713011caca559c32a542d1c6ef934a4dd13422f59986cc7bbc261a58f2a6fb230df89f4398dd245558ae455c6a8f3353afda89e77f52b44ee0ec208b9f3c88974cb8564274883712a735c69dd328c79c02ad9f73d2b2ebee97d32060b8598267d654125d024ac75cc053c4f0b549c534bc876d25c10f51d532ac8d01f03c6b34dd5591bfbd6d54888aec", 0xf0, 0x400c850, &(0x7f00000001c0)={0x23, 0x4, 0x4, 0x1}, 0x10) mlock(&(0x7f0000336000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="44cf12010100000000205804870000000000000109022400010000302009040009030300030f09210110ff01220600090581031000ff"], 0x0) 7m52.119408331s ago: executing program 6 (id=1482): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000100)=""/98, 0x62}], 0x2, 0x1000, 0x3f2f07de) (async) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x4d) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080), 0x4) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) (async) recvmsg$kcm(r4, &(0x7f00000030c0)={0x0, 0x54, &(0x7f0000002e80)=[{&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000000640)=""/178, 0xb2}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000004140)=""/4093, 0xffd}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000003100)=""/4099, 0x1003}, {&(0x7f0000000740)=""/247, 0xf7}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000000c40)=""/222, 0xde}], 0xb}, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) r5 = epoll_create1(0x80000) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000280)={0x0, 0x3, 0x6, 0xffffff81, 0xffffffff, 0x2241d03d}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xee00, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) (async, rerun: 64) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) r7 = fcntl$dupfd(r1, 0x406, r6) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) (async, rerun: 32) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000006180)={0xa, 0x0, &(0x7f0000005140)="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", &(0x7f0000006140)="9ee9a7f7df7ff5b22973af96f9f3a23e7644005aa7211f2927df422c513a14f656a2e716b1", 0x1000, 0x25}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7m48.986162543s ago: executing program 6 (id=1499): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x200000000000000, 0x50b3c0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x400, r2, 0x0, 0x0, 0x6, 0x0, 0x2, r3}]) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r2, &(0x7f0000000080)='\x00', 0x0, &(0x7f0000000180)={@align=0x7fff, {0x9bc0, 0x7, 0x6e42, 0x6}}, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4}, {[0x7fff, 0x9, 0x2]}, 0xb2000, 0x6, &(0x7f0000000240)=""/6}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f0000000280)={0x3a, @multicast2, 0x4e23, 0x3, 'wrr\x00', 0x12, 0x4, 0x5b}, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x7, 0x40, 0xc, 0xaa, {{0x11, 0x4, 0x1, 0x28, 0x44, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @remote, {[@rr={0x7, 0xf, 0x45, [@broadcast, @remote, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xed, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@multicast1, 0x7}]}, @rr={0x7, 0xb, 0xda, [@rand_addr=0x64010102, @remote]}, @noop]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000001180)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x220110}, 0xc, &(0x7f0000001140)={&(0x7f0000000cc0)=@updsa={0x454, 0x1a, 0x405, 0x70bd27, 0x25dfdbfc, {{@in=@empty, @in=@remote, 0x4e20, 0x0, 0x4e21, 0x1000, 0xa, 0x30, 0x0, 0xf7, r6, r8}, {@in=@multicast1, 0x4d5, 0x6c}, @in=@rand_addr=0x64010102, {0x643a5187, 0x890, 0x1ff, 0x1c0, 0x8a4, 0x6, 0x3, 0x8}, {0xbb3a, 0x5, 0xfffffffffffffffe, 0x2982}, {0x5, 0x9, 0x8}, 0x70bd2c, 0x3507, 0x2, 0x2, 0x80, 0x20}, [@policy_type={0xa}, @sa={0xe4, 0x6, {{@in=@local, @in=@private=0xa010100, 0x4e23, 0x0, 0x4e21, 0x7, 0xa, 0xa0, 0x80, 0x8, r9, r10}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x32}, @in=@multicast2, {0x800, 0x7, 0xc5c6, 0x8, 0x8, 0x8, 0x8}, {0x8, 0x1, 0x7fffffffffffffff, 0xb}, {0xe4, 0x5}, 0x70bd27, 0x3502, 0x2, 0x5, 0x9, 0xf3}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@private0, 0x0, 0xa}}, @algo_crypt={0x11a, 0x2, {{'xts-cast6-avx\x00'}, 0x690, "f8086db22428f00e12c490e8c8cd23ac3f447f4aaea79ce604905bf40d535a3dab9a864d7b8165071561f6635c4e58c9a3515bb1141bf07037ace6cf30547841cb63178d24cdbd1b84edcd84bfd4fc18573d5be903f6ee338565ae466ab43bbb3e9c483631c3b80330b73e6614f72f38468cef2ffd173f028e42cee6a2eff001effe0705bfa518753b2311ef140473a0d439cf002a76453c65d9260bebac4141bbcf227ce6a8e938b38c59539db088b5cfb60668b032e61bc927d2373cacdb7440842cc3ff0f5ef3179a3f388eb9ce167d98"}}, @algo_auth_trunc={0xdb, 0x14, {{'sha384-generic\x00'}, 0x478, 0x180, "55f958ad91fc979d79e75eb922ebe109b0087f19fbe6351d22cddc8fe11d854dd3d7417ca15f8f665e46cafcb01ac2a7d7e692a056b13f9a48b17fc0a5cc064c3194d989e17c720bbdc6076bb7b89b35199f9aec26b5ed35879b78034a576f37af1cc36983f0ff591bbe2fc7a0140af53e69b190c6e309b9fd7fa5eb8b51ce3d48113a526be2142e5920d38df6fddf"}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@rand_addr=0x64010102, 0x0, 0xa}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x454}, 0x1, 0x0, 0x0, 0x24000080}, 0x400) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000400)=0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000400)={0xf0f004, 0x2}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x2a, &(0x7f0000000140)=[{&(0x7f0000000340)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0xa0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7m47.981429648s ago: executing program 6 (id=1502): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b01", @ANYRES32=r0], 0x28}, 0x4044804) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) eventfd2(0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syzkaller0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "7fb3a9c89c027e5bd3b0977d5afb2dc406d7f76472021fde2d1a6d53cdc3a7f3", "dc52532b8fa0ee4c08382626733414f7b83341a051a1b79e027229c1afb949b7", "1caee462d5369d5545606aec028d305881b1d5bd5321243355b8489402ac5730", "17f61d4643488732adfd6e6c6e28e0123c5fa0a9eec41498771bb04e2a335598", "af9d2e686841345c1d83c049f4bf7d3265c1423a1195d87b39115c0c37e618c9", "5565425fb1cebee1befdaea8", 0x9, 0x7ff, 0xff, 0xfffff42b, 0x5}}) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x6, @meta={0x58583444, 0x328132b4, 0x65b8, 0xcc47, 0x352ec1d0}}) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000e00)=""/155, 0x9b}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f00000017c0)=""/4090, 0xffa}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) 7m47.701052971s ago: executing program 6 (id=1505): prctl$PR_MCE_KILL_GET(0x22) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x99, 0x3c, 0x89, 0x40, 0x10b8, 0x1f98, 0x166c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x13, 0x80, 0x5, "", [{{0x9, 0x4, 0x79, 0x8, 0x0, 0x4, 0x66, 0x3f, 0x1}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) 7m46.343729151s ago: executing program 6 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000a8deafa50a38000000060a010200000000000000000200ffff0900020073797a32000000000900010073797a30000000000c0003400000000000000002140000054b98540000000000000000000200000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048890}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 7m31.307225644s ago: executing program 36 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000a8deafa50a38000000060a010200000000000000000200ffff0900020073797a32000000000900010073797a30000000000c0003400000000000000002140000054b98540000000000000000000200000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048890}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 6m54.647439765s ago: executing program 1 (id=1719): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffe86) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0xfffff000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x9e0, 0x0, 0x8001786}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="580076bbf6f09d773d8f4b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000197c91efea11f900ba91dea7bfe3bde89d08ba2c6230c909de71135c4a2c1185ed88525e3f7c0316cc12139a40c3fbfe7c415c38027609f2fc08849b107866a1e8c22ad3089fcc8179b511159f8d5a6eba2859763a5ec7c5d751b0341c921f0893d7ea8c41762abcc6c5c26a4a4a40af15e70668ad8d880eb88a0f761485d76333c1876df6701697", 0xe0}], 0x1) semop(0x0, &(0x7f0000000540)=[{0x4, 0xe000, 0x1000}, {0x2, 0x1}, {0x2, 0x3, 0x800}, {0x0, 0x6, 0x1800}], 0x4) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) sendto$inet6(r4, &(0x7f0000000380)='6', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000010c0)='cdg', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x3c}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000580)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000000090103000000009c0000000007000008440002000c000280050001000100000006000340400100002c000180140003000000000000000000000000000000004114000400fe8000000000000000000000000000aa080005400000001f080006400000000108000640000000"], 0x70}, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f00000000c0)='Q\x00', 0x2) shutdown(r4, 0x1) 6m30.198036904s ago: executing program 1 (id=1722): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x400) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000030a010800000000000000000a00000b0900010073797a31000000000c0002"], 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000200)={r6, 0x5, 0xe01c, 0x7, 0x3ff, 0x2, 0x6, 0x6, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x2, 0x9, 0x1, 0x9, 0x7e0000}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000dc0)={0x0, 0x0, 0x10, 0x6, 0x6, 0x2, 0x0, 0x3, {r6, @in6={{0xa, 0x4e23, 0x3, @empty, 0x7}}, 0x3, 0x2, 0xe, 0x1, 0x947}}, &(0x7f0000000e80)=0xb0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r10 = fsopen(&(0x7f0000000200)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r11 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) r12 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r12, &(0x7f00000007c0)={0x2c, &(0x7f0000000240)={0x20, 0x4, 0x81, {0x81, 0x9, "333ca3e0782722fdb2d62d50d4200ae533b102f7877bc849169e5039b8c74fed8ecf362996fe9020218a7be52036960f4d6dfe2fd5662e8eb4b6b3fba0e6a160bb77404b8c68cd94d9f2835cc457a7a7388b6511fb29f3d0adae5035ea0f884225d2358cd7eab8b71eb91fd2dbc3afec1adb94271fd19a73d8daae1e523dd5"}}, &(0x7f0000000300)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "e3233b4d666f2b02726127d07efdc1a490a55fcceda6356c53be78846cb6d698f7515c509090f17636069e13a07da1b1da5f188142b52b5fc7ec84d3bdb438820ecf9d90bf4136263d6fcc0b8175a2ad07ed6c4a27f9b93cf1d7e8ca18dd35fda34c395c7bc7a368eaec70650065bda618a6455881fb4b6e2c94433ff8e6c19c3dfb485dc65a16775fb0071988a8c10b86af35c1f9d56cbd1223664bfb271a761d9746f270b824ec2215aac8a185d41ee2c8c3311c08ec112e8dd12bd7a794bbba9f735e949db37a3cde68be655ee6c68e3e47e68e0f271f9fb539550fb03b1f67a9a6737a23828cb9e835f2def14b"}}, &(0x7f0000000600)={0x0, 0xf, 0x11f, {0x5, 0xf, 0x11f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x9, 0x95f}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x4, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "50d9ea7b59e4619b16f83e41f0198b2f"}, @generic={0xf3, 0x10, 0x3, "0f74a1d7f71afd0827c8a0897cdd9e5120edfb6e612f66415c02ca196b6c4fc0c5e2151ddc83731e5687e45e840cb501a1280fbff9e27f9077d485a4be7b3694ec810bde2a558d132cf94f38361bb4452590a478814d1ce00376b51dfb6a3a97fcbe118e9847c129ae5453ffb0f4789bfa083f5eedb03cfabdbc60fc3faa9a6d0612a8c39b30f3bd12ca5c3b5408d6c4c1141ae1f92f5a84d9b4fcb4e32d8ca9b90e933146afa5b2a0122a52b636ed2543a58628bd9a549e66b043262976f411c7a3e43aef784b4dc679fc8291dbe679821751ce36aa161a5c533d3d20a5bc79dc8f99465262b8bc32fd036069c98a7a"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0xaa, 0x8, 0x77, 0x8, "ab2336c6", "9828536a"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x80, 0x7, 0x40, 0xc, 0x1}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000800)={0x40, 0x0, 0x8e, "3011767ca6464e72217eaf2a63b108dbd0613a25a780b4aae336bd1ec7a69edc4fe5e1b23fa9337dbd5a4f89e0a58883c5ccb3b0b70e0044bb14c60d237236cf2a797220a6f695942189c55be122647636b77e50fed077499533fca9bc61768cc5c52a41b45964504eca4ed1b90e394f538d66311ef45384296c15670480e2ae8ecfe3db63cc04c202c34ce495ec"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000980)=ANY=[@ANYBLOB="200008000000001c40000d2990fe"], &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xa306}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "0e3f"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="fff724f69ef8"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "651b"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0xf09}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xa9}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x8}}) fcntl$lock(r11, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r11, 0xa9525000) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 6m26.855166807s ago: executing program 1 (id=1786): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140ac1432aa0c00028008000140ac1414120c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 6m25.954006122s ago: executing program 1 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ppoll(&(0x7f0000000100)=[{r0}, {r2, 0x2003}, {r0, 0x400a}], 0x3, &(0x7f0000000140), &(0x7f0000000180)={[0x4]}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1d4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r3, &(0x7f0000000280)='0', 0x1) write$dsp(r2, &(0x7f00000003c0)="aa14b94e36e6c4e05a760d5b376048383f3dec9fb2bf43b35e7469a45da21ad3b209e2c723ddaf94964c1fe8d7cf80b6ec546a6ecdab3a7f4bb5a369c0806b3bd04a1fbfd7f7", 0x46) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) socket$inet(0x2, 0x80000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000000c0)=0x143) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) ptrace$setregset(0x4211, r6, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x850800, 0x0) 6m25.441857771s ago: executing program 1 (id=1789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002e40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2a}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000d000) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) (async, rerun: 64) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) (async, rerun: 64) prctl$PR_GET_NAME(0x10, &(0x7f0000002d40)=""/101) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc040) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004803) pipe2(&(0x7f00000003c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) 6m24.199328009s ago: executing program 1 (id=1792): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket(0xa, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000000050104000000000000efff0300000289d21331a3d45449dc246d0abfc7a868f771727133de80f0063dd093e1d8858e70d59d327358f5cbedbe0c8149d19b78"], 0x14}, 0x1, 0x0, 0x0, 0x20000c0}, 0x24000840) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000000)={'geneve0\x00', @ifru_data=&(0x7f0000000300)="6dbdb79bf23c07dd2f22793a10321b23cfeabdcb8f8d29dc335052004f7d05f4"}) ioctl$sock_netdev_private(r3, 0x89f9, &(0x7f0000000000)) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000180000000000000084"], 0x30}, 0x24000052) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x2010001, &(0x7f0000000180)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) (async) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x5, 0x6, r4, 0x0}]) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) (async) shutdown(0xffffffffffffffff, 0x0) 6m23.801742932s ago: executing program 37 (id=1792): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket(0xa, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000000050104000000000000efff0300000289d21331a3d45449dc246d0abfc7a868f771727133de80f0063dd093e1d8858e70d59d327358f5cbedbe0c8149d19b78"], 0x14}, 0x1, 0x0, 0x0, 0x20000c0}, 0x24000840) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000000)={'geneve0\x00', @ifru_data=&(0x7f0000000300)="6dbdb79bf23c07dd2f22793a10321b23cfeabdcb8f8d29dc335052004f7d05f4"}) ioctl$sock_netdev_private(r3, 0x89f9, &(0x7f0000000000)) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000180000000000000084"], 0x30}, 0x24000052) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x2010001, &(0x7f0000000180)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) (async) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x5, 0x6, r4, 0x0}]) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) (async) shutdown(0xffffffffffffffff, 0x0) 5m40.912589121s ago: executing program 8 (id=1939): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xffffffffffffffbf, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) getpid() (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) (async) setuid(0xee01) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x6}) setns(r2, 0x40000080) (async) setns(r2, 0x40000080) syz_usb_connect$cdc_ncm(0x0, 0xb3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x1b4, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xfb, 0xe2, 0xe3, 0x10, 0x944, 0x200, 0xe200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a2, 0x2, 0xff, 0x6, 0x90, 0x40, "", [{{0x9, 0x4, 0xb6, 0x5, 0x3, 0xff, 0x3d, 0xca, 0xff, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "11d34b2c92ad"}, {0x5, 0x24, 0x0, 0xe0}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x3, 0x4a}, {0x6, 0x24, 0x1a, 0x3, 0x21}, [@mdlm_detail={0x81, 0x24, 0x13, 0x2, "7e14968e46ef4a089e9ff34f99658bf401b344d51c50b2f7441ece919a95ad0b2fd9392d6ffd224cc5ebd1d7bd938febfb2213be888a8640c0ecc80ab9e6b7d1ba26d92e405b999ae4c4f4faf3860bbf2674a1d7145d7a3de3b029d330daf1f93a26510f9e1c720c9a6588bdf408ecea5da0493165ac00713423f8f353"}, @country_functional={0xc, 0x24, 0x7, 0xf7, 0x40, [0x2, 0x2, 0x7]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x40, 0x1, 0xe5, 0xff8c, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x2, 0x7}}, {{0x9, 0x5, 0x1, 0xf, 0x40, 0x0, 0x81, 0x81, [@generic={0x45, 0x9, "3ee06dbb9304134d5e1a6ba64a8521b2220b7f52d0f36cdc6fbcf9021555ca2187f8b160c575eebe6e2612351c1f8ddd1e77d430c6f240eca062d412b967516b0b7e70"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x9b, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xcb, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8000}]}}]}}, {{0x9, 0x4, 0xbf, 0x2, 0x6, 0x25, 0xd5, 0xb1, 0x4, [], [{{0x9, 0x5, 0x6, 0x1, 0x8, 0x71, 0x7f, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x4, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0xff, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0xd8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x1, 0xa2, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xaf}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x8, 0xb, 0xf8}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x8, 0x7, 0xf, 0x20, 0x3}, 0x1a, &(0x7f0000000340)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0xf, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x3, 0x0, 0x76d6, 0x20}]}, 0x1, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "426ebacb32b24e83b01ad27eaf689e01af9bf04d198c6bf5594358d59482dfa23d0cdbe59299dff7f3580f7e77742a9d134c02c9f6b86ba50c7ac99117d425e2b0ee949039532096d96f701913d63b3e5b1662573a2717439024f91f22b10ec83d961d6cb9d834ba0cf9ae8d5ac84bd2f10939d1f42026469d76f795a20e19df4fa0168f8a9577ad04efbd1c86f43b06b3511ed8c6140f2c01259f07ed4722c88c10e17a183163b5f9846388e1952533ea60e3a62d1a656387487fa1cc4b9881fc03a029030c95f764d4a45224c343b36e297271ad200cce7e5be91fde8f4536e852a7a8dabcd4e6c4a703a88df964c7a364c3ba1d8c48ad4c2465"}}]}) 5m40.263554629s ago: executing program 8 (id=1943): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x1c}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000103) syz_usb_connect(0x0, 0x1a2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESOCT], 0x0) 5m38.383187293s ago: executing program 8 (id=1951): mkdir(&(0x7f0000000200)='./file0\x00', 0xc7) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='vfat\x00', 0x8082, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setuid(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000002640)='./file1\x00', &(0x7f0000002b80), 0x800, &(0x7f0000002bc0)={[{@gid={'gid', 0x3d, r4}}]}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x6}}, {@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r4}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/nullb0\x00'}}]}) 5m38.12375977s ago: executing program 8 (id=1952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}, 0x0, 0x0, 0x1e, 0x0, "3f9c4c403fb2292c42675dd3a9fe9379c36b8e76c2fa00005088ebe5facc1a8517e6a5e4128f79dd1a59cca90ce3e1b85253f099e56bc82c2c0e2a62b1a005de77ce420e56a79695134f51a32b379cd2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8) pselect6(0xffffffffffffff26, &(0x7f0000000240)={0x3, 0x8, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0xffffffffffffffff, 0xc, 0x1, 0xffff, 0x80000006, 0xb06c}, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500200000008050b541800000000000109022400010000700029c6acc88af94bf3f4218ed2699a6ed20904003902030002000921be00430122eb00090581030002fc0005"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) fcntl$setlease(r1, 0x400, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x980929, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0xffff, 0xff, 0x1, {0x22, 0x448}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x9}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x712, 0xfd, 0xfb, 0x0, 0x10, 0x5a}, 0x2a, &(0x7f00000005c0)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x35, "1017451fa1db9ab5a0b72b21f03c3352"}]}, 0x8, [{0x33, &(0x7f0000000600)=@string={0x33, 0x3, "cdffc6c95a68d34ea1719dba6597d27ee9ddd88bdc3ed0be979e3b5e364de66a1940b6f750a851a3a3a5d80c665cceb99b"}}, {0x2f, &(0x7f0000000640)=@string={0x2f, 0x3, "89bdf483978ce3686a2e2b431b5b4d17b7896dcd1233fc1a19bb1a16d404b097fac2263d03448ed92b8afbad11"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1009}}, {0xa5, &(0x7f0000000700)=@string={0xa5, 0x3, "18a204d365a7ab119c096657bbcedb2b98e39977f71ecb196ca2bd398fc86eafbeba881e1ed33bae2e0e9d4d57f51c68f790cd3bc6cf4e18957e1d203ae1121591fd8b3037486d8887021e9e28574bf0a8ecbe5f73290a3323c1a00326636402108669635c34f956921dcd3584feffecd00fa339e542ceaec892533b70bc14d077c8f17f16d82d264240598c66576896f374058df5b46296b8737da331a4faf395d62f"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x440a}}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000140)="10", 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40801) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) close_range(r1, r5, 0x0) 5m34.986384467s ago: executing program 8 (id=1977): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000002f00)=""/4082, 0xff2}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f0000000280)=""/124, 0x7c}], 0xa}, 0x10102) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}, 0x48043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0x3, 0x5}) 5m34.818460589s ago: executing program 8 (id=1978): openat$kvm(0xffffffffffffff9c, 0x0, 0x86002, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x101600) 4m24.654139003s ago: executing program 38 (id=1978): openat$kvm(0xffffffffffffff9c, 0x0, 0x86002, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x101600) 2m52.436011574s ago: executing program 2 (id=2503): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x5, 0x9, 0x3, 0xe10c, 0x587, 0x7, 0x9, 0x7, 0x2, 0x0, 0x2, 0xffffffffffffffff, 0x400, 0x5, 0x401], 0x200000, 0x100000}) (async) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x7091c0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000140)={&(0x7f0000000100)=[{0xfffffffffffffff9, 0x0, 0x3, 0xafd, 0x3}], 0x1, 0x28, 0x5, 0x33}) syz_io_uring_setup(0x49d2, &(0x7f0000000180)={0x0, 0x541e, 0x40, 0x2, 0x1d9, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) r2 = mmap$IORING_OFF_PBUF_RING(0x0, 0x6, 0x8, 0x1010, r0, 0x8792e40b) (async) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000380)={0x2e, 0x1, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x1, 0xeb2, 0x0, 0x0, 0x1000, 0xf34, r4, 0x0, 0x1ae}}}, &(0x7f0000000400)) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000440)=0xd, 0x4) getsockname$inet(r0, &(0x7f0000000480), &(0x7f00000004c0)=0x10) (async) r5 = creat(&(0x7f0000000500)='./file0\x00', 0x18) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000540)=""/31) (async) eventfd2(0x9, 0x80000) (async) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/92, 0x5c}], 0x5, &(0x7f0000000900)=""/35, 0x23}, 0x40000041) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@remote, @in6=@initdev}}, {{@in=@loopback}}}, &(0x7f0000000a80)=0xe8) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) r6 = syz_open_dev$dri(&(0x7f0000000ac0), 0x8000000000000, 0x280) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000b00)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000b40)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000bc0)={&(0x7f0000000b80)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000c00)={@loopback, 0x2, 0x1, 0x1, 0x0, 0x6, 0x40}, 0x20) (async) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000c40)={'veth1_vlan\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) ioctl$UBLK_U_CMD_GET_FEATURES(r8, 0x80207513, &(0x7f0000000cc0)={0x0, 0xffff, 0x8, &(0x7f0000000c80)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000d40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000e00)={0x48, 0x3, r9, 0x0, 0x200, 0x3f, &(0x7f0000000dc0)="6dff68ca406512a718c8b8c0559fc42f81a6c42ba1409a8c5034e12ce5192f77a153a060297d0f51a492c545cac8c92ec7c59177fa7ff60b3ee6f25504557b"}) (async) setsockopt$inet_buf(r5, 0x0, 0x982db0a9f05f606b, &(0x7f0000000e80)="c3d590e227dc3fb32f95aa796db9b5328e8b4d6442744bd7ecaa57bd4c970e6becde912829dd621cb9f624e0d7de8117ce8adba98e3cc4fe5cb836e462e9fac98dce928af2994768a2c6b72bdccfa9df054d9c2a575a829a8c60773b59605db521de778f5e77ab3dcb02", 0x6a) (async) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000f00)=0xf168) (async) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000f40)) (async) r10 = accept4$llc(r8, &(0x7f0000000f80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000fc0)=0x10, 0x80000) connect$llc(r10, &(0x7f0000001000)={0x1a, 0x101, 0x7, 0x1, 0x4, 0x7, @random="ddd0c3d27101"}, 0x10) 2m52.223414876s ago: executing program 2 (id=2504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000332000/0x1000)=nil, 0x101, 0x0, 0x0, 0xbff, 0x68, 0x0, 0x0, 0x17}) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547046ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e8376c212ffb76f895aadedcf3f70bddcc347473dba5602d7734c4e9a2054cd3763acbb7fe82155d4a50e6a72d917b22b16ea8abd987834b4b1b04556e5442b1b643fa842a08ab5d860715b250447170c8d30829730a53974b6554a6454bab2eeda2966cc13a02a2b2c2e157ccd1795bcbc9c7bec370d9f492745b7c03c5ba21a45ff6bbba064ec83ec2ea5", 0xc72}], 0x7}}], 0x1, 0x8800) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async, rerun: 64) socket$inet(0x2b, 0x801, 0x2) 2m52.145577708s ago: executing program 2 (id=2506): socket$netlink(0x10, 0x3, 0xa) (async) r0 = socket$netlink(0x10, 0x3, 0xa) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) socket(0xb, 0x802, 0x0) (async) r2 = socket(0xb, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) recvmmsg$unix(r2, 0x0, 0x0, 0x10140, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000003, {0x1, 0x1fffffffe, 0x40000a, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0xffff, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x200003d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000001c0)=@rnullb, r4, &(0x7f0000000200)) (async) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000001c0)=@rnullb, r4, &(0x7f0000000200)) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x54, 0x0, 0x6, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008010}, 0x8818) 2m51.849759733s ago: executing program 2 (id=2509): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f80000000002010300000000000000000700001064000a80500002800c000280050001003a0000000c000280050001001100000006000340000200002c00018014000300ff01000000000000000000000000000114000400fc0100000000000000000000000000010800014000000001080001400000000180000a8024ed02800c00028005000100000000000c00028005000100060000000600034000040000100002800c000280050001003a000000480002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000bb0c000280050001003c0000000c000280050001003a000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x41) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x121) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='\x00\x00\x00\x00\b', 0x5) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r2) r3 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='maps\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) socket(0x10, 0x803, 0x0) 2m50.828639369s ago: executing program 2 (id=2513): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003180000001803"]}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003180000001803"]}, 0x0) (async) 2m49.43333396s ago: executing program 2 (id=2518): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000002080)='net/fib_triestat\x00') read$alg(r1, &(0x7f0000000080)=""/253, 0xfd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async) sendfile(r2, r0, 0x0, 0x7fffffff) 2m49.23562425s ago: executing program 39 (id=2518): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000002080)='net/fib_triestat\x00') read$alg(r1, &(0x7f0000000080)=""/253, 0xfd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async) sendfile(r2, r0, 0x0, 0x7fffffff) 2m44.665728042s ago: executing program 9 (id=2534): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 2m44.458292825s ago: executing program 9 (id=2535): socket(0x40000000015, 0x5, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002efb3b720e1092151643e010203010902120101040088da090428ec0098f2027f"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xa, @string={0xa, 0x3, "e9aed17cb4c78e98"}}}, 0x0) 2m43.882961147s ago: executing program 9 (id=2538): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, '8', "30d5b7", 0x8809, "b37b7d627d28735f3ee1d58e29bbb0c29d34bac6605c46dc72f013c9bb5a2a185dc9a8179df6a42cdf92c0128049c22f554c9d3d4fad7cb0634118c028a298a2935ec74285aaec08347dcb8eb615ae7ea2e83d54c851733c792214ebe8b709a5354dff2f921d0e173fc9fb6119e2797ee4f28d48d6b59ae1b4929a424ec70805422b5c3ca6cfec5b543a5564b2daf2559e7a5e2e89d29987e84cf23f42ecdc0db7dc798ccde1bf420bdee082d0dd6d128d780365e03a54d9bd66e82aa7751cee74eb8235d890352e4abcecccb3abaa58cbcd614b1c032b9b7c4c27679a3f648b403fccf0a1525e0632c4ad756981403d09c219eaf537ae4010a2c8557385b8b27fd3b6f1707db2e15ca3e5400e23886546c45c18fadb0e89b707ef66670efbb6a16d73bf31caa5609e795127588aaa540819d34fdcecc0534c86bf0b956de45868409e5dcd8b1a9c22550166c1d5885389440f31126319656f021b2db4885f329097c2e1649852c9f19632dbbb08898d057b345c45b66a62f284c4df1fcf02c8b33b5d888fafc667cca79f7d67ac2bf7b24e8fb2a538e6d8835cbe18a732830cc11a361378c8047501711ed093d4e8a1f545cbda60cfaa76aa7a967908647e4649afa56e4b5254edd791591a666722c39d4b392d0351e28e49af412da32a2773cd2d53cfe5c1554f46b5fd81766ca9d289f81c646995593218d3ab8e05e594ad97122cae7403f06a58f70980a3e28375d8cc3307c75eef18baa8b1e876d7f5d42d908e2c442e6fa2b4d2cdf2c29dce76a82e87a5991cbba40697e5455f4d17b5ecd5f0298b11c4ea3fa70045ef676b1da3b580cf3384ac3b3041143dfe54813bcf07a68c5985c25847459044e8644afc674b5e233eaa75c4b9055fee36e620e657ad93d153eae249f5b3964528e1fe57145078ad350b6029a9e568c81f004fbe557991145c92411b554fea742e56b125f5ff6ffe65ec057d97155c07879d791eeef4745ef76ee7ea40a5dbb05b82e36339d7f77c23e634087f71d4a8e16f6c65eef988dffcefac37c99e13f3079680c5ee2c5cdda27f483d9c38f43f6d527a60af0384e94529d86510f8557c6b72f722259b780ce9c8dcaed14021b0f5c0d0f8605a020c98fc8c39d5a67564932030c0a28fdcab2f70caecefdb39673226290eb5741e29f7f823ee69b40d4ec69f8a217806c0e5603951d58c08fd74cba81aeaf159a6f04de56509df1682226186b9c7002b1fa168680f796037abf852e41bec69da0b8fede40a133e0b2db779e03a29002afd6fbe133d2ed0b4bf2bb20d3a6698b3ad463950a8827faa4b299da753d90364aba37776f8b11d717c9ffc8d8941bcb8e0d396b7b5f613caf11710112a7f9a2351ba1461d1da6e0585fa7f5d4b979e965f862bea4e00af1fee3b540d661eb37eab2d18e2c7309387b7bb268aa341e0243fd4a6a6f44aaebb09871456f36fa57adde4b9f09f82dfa7725ee1e9b941d1ca09c35f3db5b33f2a5b871818836d449988055d7a8bd5e917d3188ebb94fdedf65fc26d84bf10a1ec5dafd3dbf9b306d2d988be512a3bc1154212335b4d2233a4b534e850a4aacc9688a1564e1df2b724616d4f3cfe1fb290fef8f9565be6578f5764d0d80ac44c2e2a6e96215bc31af180a5aca98811ab23518c04909627fff053888182fd7dd6d0faaf921d2add1b1882e1cae58bd8c494e8497e1fe323e0aaf104293acf3ff6adb565044789f08d1adb1f7e0c7c6ffc73b827fe30f7822d2df5a4a4f7abc68d044aaedc7db55fe7174495928b13f7e617e70e3ca3ccbb98449308bf5afe1d7f7dfbe611d7b098404f22a4c1ab238b5f0bc290248e74e1631ad9d453a0dae028ba57cde0c54cf219c8462ca99346352414d23cf6847d7267cc7985f50ab15474fd0adbae0e81822949d40141b6c25b49952ccb014e3ba8b68abc1eb196b63b341691ad842b7d72bdabb19efdc5ff75ebee477e6127477e4dba30f96adb76d3c627f492192916fd76343b87d49ac4fa9f85955c94bf2f1038391a789dcf97f2c6b872172c8fb10e2ebfd5b4c2d2588a85d444c557ad081c37c209cfc62fef6bef46b64ad037e6e44f004b596d39b43077a1a508491f33f3cb99a9c9038920ba7b292a3207395af7ad2a9cb3b7e2267b7b4d30fcbb16e44d13955d7de53a0e93a1314185b68f7dcf2043e80b7fb80b1b8efb1df8739a196d512123b95c77a237565123d2a14f0d0f04b5d4ee36257a48e5aeb5d62b2b5ceb89794f7216f794f654134f274a5da331f013fa9268bd3a45dc2cb83065525061a7691e7aa736007117521d4121f5bde123936f750e511995e2a77572973e6d4f3dc66f10dcb3783ea046765f96e4948b17d6c08e74f6b160eb9a3f834dad2704f3d5f6a80b94ab66e7fd3569378e7235e311c2d9c9c80a580708cba67379b2e5b3e3f4be05667d24210d759b13749fbf40992f580cc54fa1fced3fb0a12c1e3e74a7641b3277fd005ea10f3b29a4e34ee44b3e55728c9acbdeccb62fc29e6059e801b31d36b55ffd4c75fcc319e6f40065957627637113d2278a7bc0a49ab35d79114812454ff702c84460213ffd8ba7872c40a1c5d8e79eaa0f78210399d23a3cfa5979e6e1ec084d2f5c9254e08b4303cd0ee2fe2aef7a0e3c228bcb16193c75831cbaed66dbb9c2d812ca0815ea91b1c90ee026cac2607cd9e341d096d721fbfc68c316e93142503a755537e431861783f319a422e89d5273836de41356fc57915bb598264b265df575ee92cf30514ec8d6375ecef0f4fc13c837b7733628c09f30737080043f6f98b650d1f1ec6f906481f18304dc6913688bd7c25af2ed7971939a34839916c8f18058d9b8299472b02e39b6f7729d86f4fea4fa59b51c88ffc3dc25097e608450e4e3be73ad8f18bdb576f08e40e5d2913a537021022cc26f653d5752dd0319ded44bf88b7f025ec56bb54bfa806fa36e4daa4173f0564031f6442ae59363c8d441805a5d917f65d9ad115c0c5d68557d2c17a9392d9ed8604bf41d0cbe91ab50c2d81b48e539805e8f9c72f9816ab5e0d0866522823cb2d4836a58c90218b19fac8591dea5dcd6d0eb9ee8913217f00511a08193cfbaff67f60a1038193db0a29acdca8845470f5223c473d36b27521626db40e230d7ba6d427d6d5f3f07471955ea2c755459bb30143fc48a16e7e6e40a4d8e3f40293600755ea5fb437caf89c721bb57e60ac339000791e5e384b00874cd0601bc1d6a685939cd615d599abb5d36326d8f982e4ad88da52f6285694ff6575d705960720d7cbadc6eb361f2472c4ec810e143c5f2c77102a7f4d9f1588e757816caf4a9c3e19e2d48fadf11b3a9774f25c1d5a27f8768d1c5b171307e04031ebbb6798019f6e4c7bc0aa9de524045fe9d3993344e88af6630dfe61b27106773cfa65f4bc970d4ec6afb4aaf15011083f0c90a68f37649433f67ac2729c0af1e6318e2d63049d180d5997f474c9765800dd7d2880e49f43500b2287ad22e65e3e4c5bacb2c0c102a4f8c2eff64e12ff12b73e2a1c94e69482fbfbce12a5b25800396505624f32b28f6cc66215b3a4231bfc658ad2a1919818d9996f033f6ac3512543d9b1fef992edc0b417a26f6069d37520be540a0b708bd565a6d62f214aa699550385ebd480da96fd11e1f9fc84949e0eac5f4ffffbeb9d7c7ca7e1eefa9bbfd5bb5588dfbf59cbdbcca71b1672da2ab3ca4d8fc9795a0e581d30f58a4d005414ad4655bac724f2535c21461c377cb4acf37368fe77207a1dc3b19a5b16701cafc02998ce0024334f8c4f07308f2f3d20424b77fbbcf6cd99eb8fcc043837447093c5f38a12fd6a32f8168a91b0db0e27ebb8341a6dedd3deffd7364419eaeabaf33d3036600f3915e783cab4aaec91d45195ac87f0aacb9410ed0ea4651746726b72533a6324a48705b8db0ed0326df6d2041c2dcbc5a0dbd6c32fcbbd6017ac5c0a3342a529acb49388a01c1347a596390bfe3636c9a045d57a00137e9ce0e0d7928be0e1647c59d74c34c1e89ffc251804d9e82d2239056b6286d2e08897217ea3b52a4fb0236865092a0da478fc6c195b6601ee1d9206dc53f3fb869eabf15a5fd12caf9f3f9803c31468a115f9e6f94acf301dcd4d58f84b96cbe34d02cbcdcb3f06c552669932468686dc1494490eeca0b8e87f61c25515266eb1fbce77cc70555ac04ca4cea5262730f684549e988c4c70966e048d3ae856cc8d6c4296398b2670862e8871c413db962ded842e0febb836997dfd9ac8689a31f195428690f892fb4e905f6685710e06e371a7fd01a2e6e77e699f76f991c3dce501c09b59d6a1242b256da550a04987dc9add402d40997692a05c2461c67f0e4a5f93524909dd00db2f9c904c239d0f2625db0b0d6c791063ed603a6c8d0e9cd22204f19757478c6789f8ab2b1f06b9feecee220410355d332949826ba473ed5ec9bcd61e0854f8ffaec1a9a94bc46dcefbbf6a55646b51a874f4d67e32e45f0f3a7b0d6ce52f500aa4ca6f3af2481b50814baf1b0dcb2af252ced331243581129bfa4fae87bc5012b44b3e69602ba938dcbf98b54c49cea4cea4b1ffaaa074414aa8f1d4fe4713a598c150ae81048e39320946199289ada1003c5c235e7ee2164a9d4457a8a9c85accbd89e9cf9919612eb584c218e44fe21c2a4af65175464e27e24bc2f52cf9d4e89c978d743384b7f339bc439de11f020f046d7c86e45362b745c07d6d770985dbb633b83c8b19eaec33f4e7f581cdaba6b3ad8d4ad7f2167ca8367d50a6dc45186465f3378bdecf4018d705b38513521865cf6e5aeac41a16894a2c3752da76dfdded1b1bb09735046ff5e21c4e8bb29ff4a723b95f32faafec96fce1455cc624dedc12b304dcfefb6f930236cd4c7243ba25d1c1d53893f7b2ba52c0380aeb15bb33ec5b21d9fa1ef8039b0499aa7da4bb27825d5bb237e4de09f89668e96de466a8750403519a4b31a24ca42e64e0f2e1c9ac454cf7cb4bfdd70148a94ef017997e92a9d55b06aa839c20f8519237bc9f129f002e4b153f9682052763a49c86dadf611d927bcaa2b67ad80f75b367d965c78fd430b0e0fa9973377a1e773d9a70c881582d1240f6e555bc3594107783768eac426e8cbf3d62d4ed8ae0c06dfb0d492e8b51bb63be69b9d954482545e48f5e07c71470e09fdb72bdb6e7b038bfcdc66fa7d2b75ee756a68ab5bdf58ac3044fb38a2a0af6d866b8ffbf2d29ab4f2030dab0b88568c5aafa037601a93a266f3b59214fd6fef3fd06ea59b334d67aeee544e87bd4158219b6ca981d6b2424a826d8504880a3b6f5161beffd89593f4e646346bb2aadf75f336e63f8016e52bae4db6963129c05489e876c043919bb621cbbf450ad7916fb18e4cc73aba1ceeada92c83af7e6f0fa3223ed58644672eaf872caa96727c4d85bce5ef618733138da7a1181d3c663a49b791f232b5c393a1458846279f2fa30a315c127cf7779e6a416f04a435cde3b3cfe55fdfedd350d505e356bdfab74c234edc1dad2ec9845f39a93d1afd355fa2caf065e1d0dd28c0cd23b4bcc642a4c2f109ec5e9bf3d2d4a5d540b457ea4b7c41401bf43d13106cc7c4ea414e72acd5eae817cc8c06efcad7ba2b2df02110c285aaa5246b1ae8c5272e4f00f1717db02ba7f6d155d4c3a5d302fbc85ea9ecc35fe2d62944b0211b33288f77d8503bcd7225a7bb0194de6722dc279b5ca9a8e4c24b3b0be363d3edd97e036620dfba85ac554a8767cd3d133de812cf4952bd14dd"}}}}}}, 0x101a) pidfd_send_signal(r2, 0xa, &(0x7f00000011c0)={0xf, 0x8, 0x3}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 2m42.203406563s ago: executing program 9 (id=2542): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 2m42.023504764s ago: executing program 9 (id=2543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000410007012ddbdf25037c00001c002d80180009801100998032881935c6d6e2c0dea5ea75b6000000eec47386d02d1edbb6ef9f5c67d85780d461d26294f801407e2965148dfcb4872d088a33926e6ccd53a511812b22812e8d0157e831bf79400217d0392cdc3868f128aad55def3cd49a83978408ae20e7d71a6fc97104ae2735058c2e61d9712c1fb41068ef047662e5cc194bc992dff5a719258adda552068f"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) 2m41.95650058s ago: executing program 9 (id=2544): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0x7, 0x26, {0x26, 0x6, "28319503623905f32d6a65195dc4cea5c11415173a5286278d60bba901cf53c4e7196549"}}, &(0x7f0000000140)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "94451206a4b59afa3bda126073e9b6b673421f679c7cd3e1fe334637c9d46c2ae365547ae4a485e42b73cb2443d183312e64ee7c86a3afa11d45046a5f1c20ec55d89bde6ee661099fdf6f4f2ace390516def1f53e91361d89bddf2f460afc8ef2c91a06da412d9e9249bcf3409cab72c78601f3909c1d96251eb14af4d13b563b671418f40ca2d10851363402bcaaa911b2fff1a79efae0cbea1e94d81242b0eb62fa265c2210ea7a035f2f234401648717cda11a5427f1f082ff8603a823b387e7c76c3880668b5f9b22eb3fb3553eb6a071d6e9579b39ec532ee68de739bf66b98a4415"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x17, 0xa3, "5f028ecd95b32314494ece5ec4e532dfc8558bb8354aa60caada70e81311870f9283edd470f497f0b2f5d66731893a04bdb4f799b51a790dc1fb7f54841e7e1f1d76bfa5fc003d469ee0c32aa5b14a884c662db9a502727c93e5bd3e99277a08c1a3b06cce9cf3e5c95869011ea10ec437e1ab025bdb35b0229fc90697fdc333a1be9c50549fa64902c8d48def4c24ed5b3d229f7ef9839303eb5cda4a5356820d5416"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000480)={0xc0, 0x5, 0x1, "d0"}, &(0x7f00000004c0)={0x40, 0x5, 0x3, "b7850c"}}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) syz_usb_control_io$rtl8150(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003aa000000aa03420c3bda532ad0ac24eb764bcd956dfce6b24b3cf9cff2b8dfcd23c4ec8ecebc180fff8080e6897727f252f63d"]}, 0x0) 2m26.629185843s ago: executing program 40 (id=2544): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0x7, 0x26, {0x26, 0x6, "28319503623905f32d6a65195dc4cea5c11415173a5286278d60bba901cf53c4e7196549"}}, &(0x7f0000000140)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "94451206a4b59afa3bda126073e9b6b673421f679c7cd3e1fe334637c9d46c2ae365547ae4a485e42b73cb2443d183312e64ee7c86a3afa11d45046a5f1c20ec55d89bde6ee661099fdf6f4f2ace390516def1f53e91361d89bddf2f460afc8ef2c91a06da412d9e9249bcf3409cab72c78601f3909c1d96251eb14af4d13b563b671418f40ca2d10851363402bcaaa911b2fff1a79efae0cbea1e94d81242b0eb62fa265c2210ea7a035f2f234401648717cda11a5427f1f082ff8603a823b387e7c76c3880668b5f9b22eb3fb3553eb6a071d6e9579b39ec532ee68de739bf66b98a4415"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x17, 0xa3, "5f028ecd95b32314494ece5ec4e532dfc8558bb8354aa60caada70e81311870f9283edd470f497f0b2f5d66731893a04bdb4f799b51a790dc1fb7f54841e7e1f1d76bfa5fc003d469ee0c32aa5b14a884c662db9a502727c93e5bd3e99277a08c1a3b06cce9cf3e5c95869011ea10ec437e1ab025bdb35b0229fc90697fdc333a1be9c50549fa64902c8d48def4c24ed5b3d229f7ef9839303eb5cda4a5356820d5416"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000480)={0xc0, 0x5, 0x1, "d0"}, &(0x7f00000004c0)={0x40, 0x5, 0x3, "b7850c"}}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) syz_usb_control_io$rtl8150(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003aa000000aa03420c3bda532ad0ac24eb764bcd956dfce6b24b3cf9cff2b8dfcd23c4ec8ecebc180fff8080e6897727f252f63d"]}, 0x0) 1m4.018052508s ago: executing program 7 (id=2887): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x1, 0x2, "ee4f6da8d2cf4011ac7b00", 0x47524247}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='/e', 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3861878b, @mcast1, 0x97a}, 0x1c) 1m3.908334244s ago: executing program 7 (id=2889): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x3}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000140)) 1m3.813500786s ago: executing program 7 (id=2890): socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet(0x2, 0x80802, 0x23) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) (async) close(r0) 1m3.55004241s ago: executing program 7 (id=2891): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000280)={0xfffffffd, 0x5, 0x9, 0x81, 0xfffffdff}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x4000000000000000, 0xaa441) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001a00)={r6, 0xb, 0x7e, 0x22f62674}, &(0x7f0000001a40)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r6, 0xc0, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x17d3}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x80000000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000300)=0x10) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000000701010000000000000000020000090c00024000000000000000030c0002400000000000008d4a08000540000003000000000000007a30000000000c0006400000000000000080"], 0x4c}}, 0x4000882) 1m3.427300907s ago: executing program 7 (id=2892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f5000705810200020007050202000200"], 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000000c0)=0xb) write(r3, &(0x7f00000001c0)='1', 0x1) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xee, &(0x7f0000000500)=ANY=[@ANYBLOB="120151000000004082053b004000010203010902dc0003010480000904000000010100000a2401e40114001001020a24070605000f5a75dc0904010000010200000904010101010200000a240202de040500fa8007240103000300112402020800020007ec5c4ce7a54298d30b240202060000000235c90c2402010003fabe28c3871a0a245c01400406cbb0c809050109400001f0080725010006800009040200000102000009040201010102000012240200000000000000d2535ebde04682dd072401090002000a2402029e87c38201050c2402010604030332e0613c090582090004017f010725010c012603"], &(0x7f0000000840)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x95, 0x7, 0x0, 0x8, 0xe}, 0x20, &(0x7f0000000640)={0x5, 0xf, 0x20, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x83, 0x8d, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x4e, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x16, &(0x7f0000000680)=@string={0x16, 0x3, "aebe6c4aa9a4c6e88cc1798c725e6514e6e472c3"}}, {0xb2, &(0x7f00000006c0)=@string={0xb2, 0x3, "d6171dd0c73dca942d3c31a8448ae6abcc0a93a25accdfe8fbf133e600e397accfd2f40f07db3331bb802591335207df89df0b152d60c1026b8eb5f4a4190e7ac245e55d0c5894eded64f1c6f0153a94ec224a36818a26089773bb0f33e90da3ce136214fc87b61c29be014ec0ec48617c0ca9f19d55e3ab9818350b633f29d1c8532ef63b4f5899c8ec0583c261811e98f2faaf2a8e5fa70aeba03b7596f7af520b07ff3f2b3dbd14034be8af00ed1a"}}, {0xa8, &(0x7f0000000780)=@string={0xa8, 0x3, "ffc9d8fcaf41611925ffc2621bc46f92724990593328f7d09fee850897160dcc47aed0d83008ab2e8a14b79bef0629a7da0238ccd01e278c5cd4b5a79155e246e7d34a599a39736d2be1690aea01ca1d4a5b4474b0d63cd6f540ba4750b122667690c3cc486133580cfa426b905a4647d1befe08952adffc171fca4a3e455c8f63c10d39ee48fdbbc28c827c316f7ff99228172f2e1eea6917b6d7915cac9349cec7dc9a4da4"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300920903b00956a97ae86927fb565548f9386278d9b43af6a56abedf5726c3f22d4e5876d857c056df297f075f92b36b606656bc99ce7723e10f776de7741b64b01c5c0fe4b40d0e4496a77edd1b7415894c9bb52875cf88f19c9bb4a15da797156ef0091d5d300347", @ANYRES32=r5, @ANYBLOB="0c005e800800050014000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34090000) r7 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x9, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) syz_usb_ep_read(r1, 0x2, 0x28, &(0x7f0000000100)=""/8) syz_usb_ep_write(r1, 0x81, 0x10, &(0x7f00000002c0)="00000000000100"/16) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x60, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6b7, 0x4f}}}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffff88}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5ea}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xbd}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 1m0.390094593s ago: executing program 7 (id=2905): mount$cgroup(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x8, &(0x7f0000000c00)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 44.951330538s ago: executing program 41 (id=2905): mount$cgroup(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x8, &(0x7f0000000c00)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 6.25024881s ago: executing program 4 (id=3055): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20000, 0x0) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000180)={0x9, 0x20, 0x40, 0x7, 0x20, 0x7, 0xffffffff, 0xd7, 0x2, 0x80000000, 0x100, 0x8, &(0x7f00000000c0)=[0xff, 0x2, 0x10000, 0x1], 0x4, &(0x7f0000000100)="8c62c44552ac50b2eea9850d26ad776e42acf38e27ef6cb892c836b00d91d27ec5575b09aa30d28953f5cb7a2c21a41943545081a4d16b3967b00a03ca8d0555f1461544f6d41dea8acb9fd1771ab4160b48638219bba349ff9e28c87021c621", 0x60}) open_by_handle_at(r1, &(0x7f0000000200)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x10, 0xc50}, 0x4, 0x7}}, 0x208000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000841) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000580)={@empty, @local, 0x0}, &(0x7f00000005c0)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000600)=r4) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000640)={0x10, 0x0, "b58496a9db645fd957bd4a1b92807cea"}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000680)=0x100000) r5 = syz_open_dev$dvb_frontend(&(0x7f00000006c0), 0x7, 0x400000) ioctl$FE_READ_BER(r5, 0x80046f46, &(0x7f0000000700)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x42402, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r6, 0x80207501, &(0x7f00000007c0)={0x0, 0xffff, 0x8, &(0x7f0000000780)}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x1, 0x5, 0x8, 0x5, 0x7}, &(0x7f0000000900)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000940)={r7, 0x9, 0x8, 0x40, 0x1, 0xd6}, 0x14) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000a40)={&(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0], 0x3, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000ac0)={&(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000b40)={0x6, r8, r9, 0xcccccccc}) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000b80)=0x44, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) socket$netlink(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000c40)={r7, 0xabb}, &(0x7f0000000c80)=0x8) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000dc0)={0x18, &(0x7f0000000cc0)=[{0x1, '\x00', @buffer={"d91537bdd9a93ce2f72005eac66945d08ae79da90840d3bcd72ac9e3beae2126", 0x20}, 0xd}, {0x4, '\x00', @buffer={"d786e5392c0b518124966bfa1403a322273cfcfe2abe58c2bccf2fffd2a6af64", 0x20}, 0x1}, {0x45, '\x00', @buffer={"3974527a4b1a7e0fdd0cf959fd798f289ba09aa969d2a9e6cb01a9cd815b925b", 0x20}, 0xe}]}) 5.816402573s ago: executing program 5 (id=3056): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x404, 0x3, 0x2, 0x7, 0xbfffffffffffff85}) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='\n'], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0xe, 0xf0, 0xfb, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ca"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x2}, [@acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7f, 0x7, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x23, 0x2}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xc8, 0x6, 0xff, 0xff, 0x1}, 0xb0, &(0x7f0000000180)={0x5, 0xf, 0xb0, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7f, 0x84, 0x1}, @generic={0x8d, 0x10, 0x4, "769ea748b359b0fdbe5f7fe8ea3af488b66b97eb2ae926da832c2f8fafab59379615a3dbb9c631b4ebcb3def2d62f41d4fe27375e933ee1b185769bb1184afff172fcb52d004b29226add77f51b0ddd855e7014b4b6e2c3e7911e104fe1834d7c4cb86d365ed9d5ca6af6a10e48a5432ea380baa77213ab1516f028e0f33e6b3393f0ad26beb927f4395"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xef, 0x5, 0xfffc}]}, 0x3, [{0x84, &(0x7f0000000240)=@string={0x84, 0x3, "2b688e4bfd5cfa51c43e3594d477f527bb900edf9694dc50e16e0b27c3af1b77e523e80b9b17c63747c06d3eb3c02b22788f391a3ce4edd9e4c1e2db974d20cbb83c33d8bce83c58504ef7884bbad007219e54afb61f0b2757a9813e6b937ec1a6a35a697fdd61499837bd6616f34d649f644f74b6da47ea27b0f3934c9b849be19d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "1935a05bbbde80980eb761070992b8fad55a505b0afa50562366461de38dfa8d59f4f6957c7923fc39f6dec55d73"}}]}) 4.460673911s ago: executing program 5 (id=3059): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x77, 0x101000) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x0, {0x4, 0x4, 0x2}, 0x0, 0xee01, r4, 0x7, 0x6, 0x1, 0x7, 0x3, 0x0, 0x1, 0x8bc3, 0x9, 0x6, 0x8, 0x10001, 0x1, 0x8000, 0x9}}, 0xa0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r7 = userfaultfd(0x0) fsetxattr$system_posix_acl(r7, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x3, r3}, {0x2, 0x6, r3}, {0x2, 0x1, r3}, {0x2, 0x4, r3}, {0x2, 0x4, r3}], {0x4, 0x6}, [{0x8, 0x3, r4}, {0x8, 0x6, r4}, {0x8, 0x0, r4}, {0x8, 0x3, r4}, {0x8, 0x7, r4}, {0x8, 0x2, r4}, {0x8, 0x6, r4}], {}, {0x20, 0x4}}, 0x8c, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000440), 0x352, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000480)={0x4, 0x0, [{0x906, 0x0, 0x6}, {0x3a4, 0x0, 0xe0c}, {0xa67, 0x0, 0x6}, {0xc2, 0x0, 0x4}]}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000500)={0xdddd0000, 0x111000}) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x5, 0xa}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000700)={r8, r9, 0x4, 0x3, 0x6b}) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000007c0)={0x9, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x3, 0x6}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000980)={{0x1, 0x1, 0x18, r13, {0x4}}, './file0\x00'}) socket$tipc(0x1e, 0x2, 0x0) fstat(r5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x200000, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[{@access_client}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, '/dev/autofs\x00'}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cachetag}, {@nodevmap}, {@version_L}, {@cache_mmap}], [{@euid_lt={'euid<', r3}}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/dri/card#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r16}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) ioctl$DVB_DEMUX_DMX_DQBUF(r6, 0xc0186f40, &(0x7f0000000c40)={0x8, 0x9, 0x40, 0x5, 0x1, 0x1ff}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000cc0)={&(0x7f0000000c80)=[r12, r14, r11], 0x3, r10, r9, 0x5af5, 0x1, 0x1, 0x1ff, {0x6, 0x5, 0x6, 0x75b1, 0x1, 0x7, 0x0, 0x21, 0x8, 0x0, 0x7, 0x5, 0xf158, 0xcb, "0d4ff6c35cd801827b5a5189fa3c3df29425620ae2afb1380af38c0c9cb815a5"}}) r17 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0xe, 0x7}, {0x9, 0x5, 0x9, 0x2, 0x200, 0xa, 0x3, 0x5}, {0x9, 0x5, 0x28750d5d057c1e85, 0x3, 0x7ff, 0x5e, 0x5, 0x5}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r17, &(0x7f0000000e40)={0x14, &(0x7f0000000d80)={0x40, 0x7, 0x56, {0x56, 0xf, "fd0d4d6d762ea86e4c520b982f41c9e04d69fb6ae699eddd196e8731f7e57e83823fc6fdeb99f8c4cfa65aa9775c2d8ae03523dc412e440070ea9e8e3e8296b35dcbc1c784680a34b54d8e2314d373823d37631f"}}, &(0x7f0000000e00)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000001340)={0x1c, &(0x7f0000000e80)={0x0, 0x8, 0x24, "f5d70ae1cfff5e0346ba2c5b3c2651787532717a13faeca9f8597119148b779c67b4f689"}, &(0x7f0000000ec0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001300)={0x21, 0x0, 0x2, "0cfb"}}) 3.631815215s ago: executing program 0 (id=3063): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 3.466337781s ago: executing program 3 (id=3064): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905ff27"], 0x0) 3.433672208s ago: executing program 5 (id=3065): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f0000000300)={0x0, 0xffff, 0x70, &(0x7f0000000280)={0x70, 0x3, {0x7, 0xc, 0x33, 0xe, 0x23, 0x101, 0x8001, 0xd8f2, 0x8}, {0x7, 0x2, 0x227, 0xb08, 0x300}, {0x7, 0x7, 0x7, 0x1}, {0xee4d, 0xc5, 0x2}}}) ioctl$UBLK_U_CMD_DEL_DEV(r4, 0xc0207505, &(0x7f0000000380)={r5}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r7, 0x4068aea3, &(0x7f0000000440)={0x80, 0x0, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x180, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2277b0855bf016e0e221443f8d9e86683d2c620ffca4eef3cdd6b3ce85241df5"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "b48a846882a0fc8da82098f021e4045adebad889eb5ae18c7d9cb6bd8badfa2c8c2c56bf1bf570da12d7d4385a74b5bc8ceaac354dfef41dc53a0320028a1387577d82479eb9fe37aa4b0a5dba78cd0ca5b0ffc2dc3df233159c84ba112a23a1e1fda728f5b64d0164d9cc87a393428d10455d6bf669f9559d115f2130adb149a94c86d9884c3aaa0e12d609bf2e78d1b448bdbc0b0d08c165c32965e2ab0a2f0dd3b2463d428204eb33c1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x2d, 0x3, "cedfbc1df970e1df84b9b6b18eb330b19625c13103e3837d745472dc9bacb12f196c8300e1576b0499"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000740)=0x12, 0x4) mknod(&(0x7f0000000780)='./file0\x00', 0x8000, 0x16) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f00000007c0)={{r0}, "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"}) listen(r0, 0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000017c0)=0xa, 0x4) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000001800)={@remote, @loopback, 0xffffffffffffffff, "4e271e69f42af54f96e0b1fd4d9e829f4a6c6734fd58ac99ed6f47da81c18b5d", 0x800, 0x4eb8, 0x4, 0x5d9c}, 0x3c) r10 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001840), &(0x7f0000001880)=0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000018c0)) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001ac0)={0x1, 0x1, 0xfffffffffffff530, 0x10, 0x1ff}) ioctl$UBLK_U_CMD_SET_PARAMS(r4, 0xc0207508, &(0x7f0000001b80)={r6, 0xffff, 0x70, &(0x7f0000001b00)={0x70, 0x0, {0xa, 0xa, 0x9, 0x8, 0x7, 0x9, 0x9d, 0xc6bb, 0x7ff}, {0x2, 0x80, 0x8, 0x4, 0x5}, {0x6, 0x22f5, 0x3, 0x1ff}, {0x3, 0x9, 0x7ff}}}) r11 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c40), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x30, r12, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r13 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001d40), 0x480102, 0x0) fcntl$dupfd(r7, 0x0, r13) stat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)) inotify_add_watch(r13, &(0x7f0000001e40)='./file0\x00', 0x20) 3.295540052s ago: executing program 5 (id=3066): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x1c927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x5, 0x3, {{0x15, 0x4, 0x1, 0x37, 0x54, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x4, [{@multicast1, 0x7}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x8}]}, @timestamp={0x44, 0x8, 0x63, 0x0, 0x6, [0xb]}, @timestamp={0x44, 0x14, 0x6e, 0x0, 0x7, [0x8, 0x101, 0x96, 0x4]}]}}}}}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x3, r4, 0x5}, 0xc) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_open_dev$mouse(&(0x7f0000000080), 0x4, 0x0) 3.099689102s ago: executing program 4 (id=3067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) eventfd(0x5) r4 = fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000005c0)={{r2}, r5, 0xe, @inherit={0x90, &(0x7f00000003c0)={0x1, 0x9, 0x1000, 0xa4c, {0x20, 0x1, 0x9, 0x9, 0x9819}, [0x0, 0x7, 0xc0c9, 0x2, 0x100, 0x10000, 0x6, 0x5, 0x5]}}, @devid}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0x2, 0x5, 0x2}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x287, 0x0, 0x6}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xa2) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) lsetxattr(&(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000140)=@random={'system.', '/dev/kvm\x00'}, &(0x7f0000000180)='/dev/kvm\x00', 0x9, 0x2) write(r6, &(0x7f0000000080)='40', 0x2) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.638877525s ago: executing program 0 (id=3068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048051}, 0x5430c1966e843766) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) 2.331389904s ago: executing program 0 (id=3069): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f6a000/0x4000)=nil}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x20000000) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180)) unshare(0x26020480) r3 = socket(0x28, 0x5, 0x0) shutdown(r3, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010101, 0xfe, 0x32}, @in6=@empty, {0x0, 0x400, 0xfffffffffffffffd, 0x8, 0x1, 0x6000000, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0x7}, {0x3}, 0x470bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a20f000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48080) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r3, 0x48777000) unshare(0x2000900) 2.32801607s ago: executing program 4 (id=3070): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x7, 0xffffffff, 0x7, 0x1, 0xe2, 0x9, 0x80000003, 0x40, 0x7, 0x0, 0x5, 0x1ff, 0xf914, 0x8000000001, 0x40, 0x5554], 0x8080000, 0x80002}) listen(r0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000000)={0x0, 0xc1, 0x79, 0x34325241, 0x3, [0x2], [0x80ffff, 0x3], [0x0, 0x0, 0x4000, 0xfffffffd], [0x400000000000000]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r4) accept4(r0, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x0, 0x80000) 1.902421213s ago: executing program 3 (id=3071): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000002c0)=0x6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x200011, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0xe, @pix_mp={0x2, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) r5 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r5, 0x8800000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup3(r7, r6, 0x0) sendfile(r8, r5, 0x0, 0x1000009) accept$alg(r6, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7004fddbdf255900000008000300", @ANYRES32=r11], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r10, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x22}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20040) ppoll(&(0x7f0000000180)=[{r12, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.037401803s ago: executing program 0 (id=3072): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x23, 0x2, 0x200, "3bd9e82ea206e410020000cf00e89a00000000268cd21806000000000000007e", 0x30364d54}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='ip6gretap0\x00') 915.526405ms ago: executing program 4 (id=3073): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000150000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 748.29202ms ago: executing program 5 (id=3074): r0 = getpid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) write$input_event(r1, &(0x7f00000000c0)={{}, 0x12, 0x4, 0x101}, 0x18) (async) r2 = socket$alg(0x26, 0x5, 0x0) write(r2, &(0x7f0000000540)="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", 0x10c) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0]) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11) r4 = syz_pidfd_open(r0, 0x0) (async) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000005940)=ANY=[@ANYBLOB="12010102706cd220110f0006f6ce010203010902120001050270020904e1f0000d4ad0d8"], &(0x7f0000005ec0)={0x0, 0x0, 0x0, 0x0}) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x21c402, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3) (async) r7 = socket$kcm(0x21, 0x2, 0x2) (async) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x408c0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async) setns(r5, 0x66020000) r8 = open$dir(&(0x7f0000000040)='./debug\x00', 0x103042, 0x100) mount_setattr(r8, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x81, 0x80000, {r5}}, 0x20) 735.008867ms ago: executing program 3 (id=3075): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)) select(0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x0, 0x2710}) 571.45746ms ago: executing program 4 (id=3076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x8a080, 0x42) write(r2, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r5, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af25, &(0x7f00000001c0)=0x304008000) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfffffffffffffebf, 0x80d4, &(0x7f000005ffe4)={0xa, 0x4e33, 0x0, @loopback}, 0x1c) 570.471665ms ago: executing program 3 (id=3077): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10400, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) move_mount(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x140) mount$nfs(&(0x7f0000000100)='({/Qi\\+-!\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2c00, &(0x7f00000001c0)={[{'*!'}, {'/dev/hwrng\x00'}], [{@appraise_type}, {@pcr={'pcr', 0x3d, 0x29}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x19c, 0x2, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8fa56194d787b589}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4008880}, 0x40080) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000480)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x5, @empty}, @in6={0xa, 0x4e24, 0x7195, @loopback, 0x8}, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}], 0x68) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000500)="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") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(r1, &(0x7f0000000600), &(0x7f0000000680)=0x60, 0x80000) r5 = syz_open_dev$video(&(0x7f00000006c0), 0x400, 0x400000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000700)={0x2, 0xd77, 0x2}) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x284}, 0xc, &(0x7f0000000b80)={&(0x7f0000000780)={0x3d0, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_EXP={0x28, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x717d}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_EXP={0x394, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x208, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}}}]}]}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x34}}]}, @CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x99}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x3}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001d80)={&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/119, 0x77}, {&(0x7f0000000d00)=""/40, 0x28}], 0x2, &(0x7f0000000d80)=""/4096, 0x1000}, 0x2000) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001ec0)={0x44, 0x1000, 0x4}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'vxcan0\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000001f40)={0x1d, r7, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000002080)) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f00000020c0)={0x4, {0x9b1, 0x6667, 0x5, 0x7}}) write$P9_RLCREATE(r1, &(0x7f0000002100)={0x18, 0xf, 0x1, {{0x10, 0x4}, 0x5}}, 0x18) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002140)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000021c0), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x20, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x24044841) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f0000002300)={0xd0, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000024c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r9, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000080) 475.689886ms ago: executing program 0 (id=3078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001114010027bd7000ffdbdf2508004a000000000008000300010000000800010002f5ffff07004b00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001114010027bd7000ffdbdf2508004a000000000008000300010000000800010002f5ffff07004b00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) accept4(r1, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000240)='./file0\x00', 0x162) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340), 0x3000040, &(0x7f0000000d80)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}], [{@smackfsdef={'smackfsdef', 0x3d, './cgroup.cpu/syz0\x00'}}]}) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x3, 0x1764a87}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x18) (async) r4 = fsmount(r3, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') (async) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) (async) openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) r5 = socket$packet(0x11, 0x423deeddafad4267, 0x300) landlock_create_ruleset(&(0x7f0000000100)={0x5000, 0x2, 0x2, 0x8558}, 0xfffffffffffffd8f, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x5000, 0x2, 0x2, 0x8558}, 0xfffffffffffffd8f, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0xb4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x22, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001008010000000000000000000a00000a3800469b8155a21aedf200000000000000000008240005800800014000000062080001400000005c0800014000000032080001400000809b14000000110001", @ANYRES32=r4, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRESDEC=r5], 0x60}}, 0x8014) 449.543107ms ago: executing program 3 (id=3079): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x20008000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}}, 0x40000) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4c000) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x11, 0x1, {0x20, 0x1, 0x2}}, 0x14) (async) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x11, 0x1, {0x20, 0x1, 0x2}}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x3, 0x3, 0xffff, 0x0, 0x46}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000500)={r6, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e23, 0x5, @local, 0x8}]}, &(0x7f0000000540)=0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0x1}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x4, 0x57, 0x100, 0x9a6, 0x1c, 0xc, 0x5, 0x0, 0x3]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000700)={r7, 0x0, 0x7d, "9c631fb71b8b20e899cdd5396f7c6f4d92c1db73e31288bf67cbebd41c2452f2589d24256531008a078b6ef1778cb683bcdf81a7c617f7dc1727a8d229c4184fcff3bcd6bd05a6f518fbbadaeb818575fa802900cf2945be083bb7d48f66d3e26a06358a12a7f4b43c2ed8b9e1bec80ffe2802c6dacdd13dd338f9f43b"}, 0x85) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KDGETMODE(r10, 0x4b3b, &(0x7f0000000940)) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000980)={r7, 0x44f, 0x40, 0x5, 0x1, 0x4, 0x9f, 0x98, {r7, @in6={{0xa, 0x4e24, 0x20ade845, @mcast2, 0x6}}, 0x8, 0x8, 0x10001, 0xd, 0x349}}, &(0x7f0000000a40)=0xb0) ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, &(0x7f0000000a80)=0x3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000008}, 0x11) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000008}, 0x11) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000bc0)) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) (async) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7d}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r11, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) splice(r5, &(0x7f0000000f40)=0x6, r8, &(0x7f0000000f80)=0xe, 0x8000, 0x4) (async) splice(r5, &(0x7f0000000f40)=0x6, r8, &(0x7f0000000f80)=0xe, 0x8000, 0x4) 131.196424ms ago: executing program 0 (id=3080): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f6a000/0x4000)=nil}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x20000000) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180)) unshare(0x26020480) r3 = socket(0x28, 0x5, 0x0) shutdown(r3, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010101, 0xfe, 0x32}, @in6=@empty, {0x0, 0x400, 0xfffffffffffffffd, 0x8, 0x1, 0x6000000, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0x7}, {0x3}, 0x470bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a20f000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48080) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x80000}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) unshare(0x2000900) 74.926381ms ago: executing program 5 (id=3081): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x3, 0x6, 0x8000104, 0x3ffd, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x40, 0x15}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.715119ms ago: executing program 4 (id=3082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e7"], 0x288}}, 0x20050800) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x7f, 0x7, 0x8, 0x3, 0x26, 0x2006, 0xf2, 0x20008, 0x80ffa, 0x2, 0x0, 0x4, 0x0, 0x1000004, 0x1, 0x10000, 0xe44, 0x7ffffffd, 0x2, 0x8, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x7, 0xee, 0x1, 0x8000]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x1, 0x1, 0x5, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x72, 0x1, [{0x9, 0xa}], 0xd9}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x2}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x80, 0x6, [{0x95, 0xb7}, {0x40, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x6}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x9b, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x4, 0x0, [], 0x1}], [{{0x9, 0x5, 0x0, 0x1, 0x20, 0x7, 0xf, 0x9, {0xd, 0x25, 0x1, 0x9, "78b60fb75c80749941"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x0, 0x8, {0x12, 0x25, 0x1, 0xe, "bd8f1a60798021a2c2c7d14c5b4a"}}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x80, 0x9, 0x7, {0x8, 0x25, 0x1, 0x4, "7e569243"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x3a, 0x2, 0x40, 0x20, 0x3}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x400a}}, {0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "81478a29941996470df26f7960465d55c73c842fd294c0a0d95660048f522d66c6cb885f96ac1bcdf59c90c00dc684d7aed2bccb016ad9869c2dce2ef13412a3d4a66deaa84be5bfe5125e9e1b7a25eed45d3844fb6b38e44906e053fd85fde644fd3c5be9163a6017248d4b5d294a7612d824e5f19b2095cf52a359ee8f820872ae6f737174d342f3de14e6ff313c588dae84b473d761c5606ddb4e981d7e566b131742d538831602c92a8004c37ab3ba6291895ab96d2f256713dc8b054fc8b3fb"}}, {0xf3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}]}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x4, 0x75, {0x75, 0xf, "c54f77f47641034005e177556e0b8bf4cd0af869f283b0b5684d6c79e51d57bdcc27fd14592c6b7259f2941289baa5b58c91476a5f4e52b01ba896b1910fb039bab61a14998bf6f37b5bc0818894338360ba4d46e4d40392f3522969127cd1ae0218090262de1f66734a21aabf4bac26fe5fa0"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000640)={0x60, 0xe, 0xe3, "fbb9ba8cac8600dc12912119395ef7f9b6fad0c18f1bfe575111efdc99edc9269d8e42a2fc206e91a57e7ec3d7c0249b73c0717310ea83d6dde3c5a451860fa8e19fdc061a890ed858240ee10d49ce1cf760fe9c3e3bb6e26023a14bf6778445f2917c83e1176483d8f19f25e3cd11d18466ffff50da95b0dd7d6267efb42d7e1e261782602b604903ebccd80664ade12f0f72ed62f607e44ccda2769ab37f92ce713c5fd012205eb057cec65c91da6cce2017d98358b1c2c973b715757c4c3a452b70dd0dd31d9648e42616c612f163768c818dd0c912e6e2f705051e937052d6cc41"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x3, 0x600, 0x6, 0x8, 0x4, 0x1, 0x1, 0x7cfa, 0x9, 0xfa20, 0x7, 0x6}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0xffff}, &(0x7f00000009c0)={0x20, 0x89, 0x2}}) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e7"], 0x288}}, 0x20050800) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYRES64], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x7f, 0x7, 0x8, 0x3, 0x26, 0x2006, 0xf2, 0x20008, 0x80ffa, 0x2, 0x0, 0x4, 0x0, 0x1000004, 0x1, 0x10000, 0xe44, 0x7ffffffd, 0x2, 0x8, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x7, 0xee, 0x1, 0x8000]}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_connect$midi(0x5, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x1, 0x1, 0x5, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x72, 0x1, [{0x9, 0xa}], 0xd9}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x2}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x80, 0x6, [{0x95, 0xb7}, {0x40, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x6}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x9b, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x4, 0x0, [], 0x1}], [{{0x9, 0x5, 0x0, 0x1, 0x20, 0x7, 0xf, 0x9, {0xd, 0x25, 0x1, 0x9, "78b60fb75c80749941"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x0, 0x8, {0x12, 0x25, 0x1, 0xe, "bd8f1a60798021a2c2c7d14c5b4a"}}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x80, 0x9, 0x7, {0x8, 0x25, 0x1, 0x4, "7e569243"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x3a, 0x2, 0x40, 0x20, 0x3}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x400a}}, {0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "81478a29941996470df26f7960465d55c73c842fd294c0a0d95660048f522d66c6cb885f96ac1bcdf59c90c00dc684d7aed2bccb016ad9869c2dce2ef13412a3d4a66deaa84be5bfe5125e9e1b7a25eed45d3844fb6b38e44906e053fd85fde644fd3c5be9163a6017248d4b5d294a7612d824e5f19b2095cf52a359ee8f820872ae6f737174d342f3de14e6ff313c588dae84b473d761c5606ddb4e981d7e566b131742d538831602c92a8004c37ab3ba6291895ab96d2f256713dc8b054fc8b3fb"}}, {0xf3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}]}) (async) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) (async) setns(0xc9, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x4, 0x75, {0x75, 0xf, "c54f77f47641034005e177556e0b8bf4cd0af869f283b0b5684d6c79e51d57bdcc27fd14592c6b7259f2941289baa5b58c91476a5f4e52b01ba896b1910fb039bab61a14998bf6f37b5bc0818894338360ba4d46e4d40392f3522969127cd1ae0218090262de1f66734a21aabf4bac26fe5fa0"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000640)={0x60, 0xe, 0xe3, "fbb9ba8cac8600dc12912119395ef7f9b6fad0c18f1bfe575111efdc99edc9269d8e42a2fc206e91a57e7ec3d7c0249b73c0717310ea83d6dde3c5a451860fa8e19fdc061a890ed858240ee10d49ce1cf760fe9c3e3bb6e26023a14bf6778445f2917c83e1176483d8f19f25e3cd11d18466ffff50da95b0dd7d6267efb42d7e1e261782602b604903ebccd80664ade12f0f72ed62f607e44ccda2769ab37f92ce713c5fd012205eb057cec65c91da6cce2017d98358b1c2c973b715757c4c3a452b70dd0dd31d9648e42616c612f163768c818dd0c912e6e2f705051e937052d6cc41"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x3, 0x600, 0x6, 0x8, 0x4, 0x1, 0x1, 0x7cfa, 0x9, 0xfa20, 0x7, 0x6}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0xffff}, &(0x7f00000009c0)={0x20, 0x89, 0x2}}) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) 0s ago: executing program 3 (id=3083): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x3, 0x98, 0x1, {0x22, 0xf1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7}}}}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): ice to a proper driver. [ 740.125339][ T5581] usbserial_generic 3-1:1.0: generic converter detected [ 740.163837][ T5581] usb 3-1: generic converter now attached to ttyUSB0 [ 740.370006][ T5581] usb 3-1: USB disconnect, device number 31 [ 740.385841][ T5581] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 740.386633][ T5581] usbserial_generic 3-1:1.0: device disconnected [ 742.759742][ T5581] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 742.813372][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2302'. [ 742.919368][ T5581] usb 3-1: Using ep0 maxpacket: 32 [ 742.921787][ T5581] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.921822][ T5581] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.924265][ T5581] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 742.924287][ T5581] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 742.924302][ T5581] usb 3-1: Product: syz [ 742.924313][ T5581] usb 3-1: Manufacturer: syz [ 742.998182][ T5581] hub 3-1:4.0: USB hub found [ 743.193988][ T5581] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 743.848484][ T4910] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 745.101541][ T5581] IPVS: starting estimator thread 0... [ 745.135474][T15178] netlink: 'syz.4.2311': attribute type 5 has an invalid length. [ 745.199602][T15176] IPVS: using max 8 ests per chain, 19200 per kthread [ 747.332348][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.332465][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.419468][ T49] usb 3-1: USB disconnect, device number 32 [ 748.809402][ T49] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 748.962361][ T49] usb 3-1: not running at top speed; connect to a high speed hub [ 748.964704][ T49] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 748.964736][ T49] usb 3-1: config 8 has an invalid interface number: 145 but max is 2 [ 748.964764][ T49] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 748.964790][ T49] usb 3-1: config 8 has 2 interfaces, different from the descriptor's value: 3 [ 748.964815][ T49] usb 3-1: config 8 has no interface number 1 [ 748.964884][ T49] usb 3-1: config 8 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 748.964911][ T49] usb 3-1: config 8 interface 0 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 748.964940][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 748.964974][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 748.965007][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 748.965041][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 748.965073][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 748.965105][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 748.965145][ T49] usb 3-1: config 8 interface 0 altsetting 9 has an invalid endpoint descriptor of length 4, skipping [ 748.965173][ T49] usb 3-1: config 8 interface 0 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 748.965202][ T49] usb 3-1: config 8 interface 0 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 748.965234][ T49] usb 3-1: config 8 interface 0 altsetting 9 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 748.965282][ T49] usb 3-1: config 8 interface 0 altsetting 9 has a duplicate endpoint with address 0x81, skipping [ 748.965309][ T49] usb 3-1: config 8 interface 0 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 748.965360][ T49] usb 3-1: config 8 interface 145 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 748.965387][ T49] usb 3-1: config 8 interface 145 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 748.965419][ T49] usb 3-1: config 8 interface 0 has no altsetting 0 [ 748.965441][ T49] usb 3-1: config 8 interface 145 has no altsetting 0 [ 748.968794][ T49] usb 3-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 5.06 [ 748.968830][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.968856][ T49] usb 3-1: Product: У [ 748.968875][ T49] usb 3-1: Manufacturer: ї [ 748.968892][ T49] usb 3-1: SerialNumber: 㧓ᱨ뚍淯ꍘ糘젎ㅎ㋵ో䨿ꦺ굛曭堀ꁣݝ밦潭贵㡎ኔꋴ榨㢪勐䨍鈈渌~呝莂汏䌋㨉滳擃ܬꇀ柕ﳸꡰ㇝ [ 749.249264][ T8977] Bluetooth: hci5: command 0x2016 tx timeout [ 749.336493][T15233] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 749.336622][T15233] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 749.646483][T15233] binder: 15230:15233 ioctl 400c620e 200000002e40 returned -22 [ 749.863505][ T49] snd_usb_podhd 3-1:8.0: Line 6 POD HDDESKTOP found [ 749.863533][ T49] usb 3-1: selecting invalid altsetting 1 [ 749.863551][ T49] snd_usb_podhd 3-1:8.0: set_interface failed [ 749.863840][ T49] snd_usb_podhd 3-1:8.0: Line 6 POD HDDESKTOP now disconnected [ 749.864040][ T49] snd_usb_podhd 3-1:8.0: probe with driver snd_usb_podhd failed with error -22 [ 749.957853][ T49] usb 3-1: USB disconnect, device number 33 [ 750.551656][T15268] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2339'. [ 751.389738][ T4910] Bluetooth: hci5: command 0x2016 tx timeout [ 751.710534][ T198] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 751.860969][ T198] usb 3-1: not running at top speed; connect to a high speed hub [ 751.862251][ T198] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 751.862857][ T198] usb 3-1: language id specifier not provided by device, defaulting to English [ 751.864786][ T198] usb 3-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 751.864813][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.864834][ T198] usb 3-1: Product: syz [ 751.864855][ T198] usb 3-1: Manufacturer: [ 751.864855][ T198] [ 751.864866][ T198] usb 3-1: SerialNumber: syz [ 752.002135][T15296] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 752.164356][ T198] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 752.168067][ T198] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 752.324963][ T198] usb 3-1: USB disconnect, device number 34 [ 752.392458][T14520] udevd[14520]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.410473][ T198] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 753.559451][ T198] usb 3-1: Using ep0 maxpacket: 16 [ 753.561561][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 753.564666][ T198] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 753.564714][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.564738][ T198] usb 3-1: Product: syz [ 753.564755][ T198] usb 3-1: Manufacturer: syz [ 753.564771][ T198] usb 3-1: SerialNumber: syz [ 753.584159][ T198] usb 3-1: config 0 descriptor?? [ 753.650105][ T198] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 753.650133][ T198] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 754.033401][ T198] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 754.485238][ T198] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 754.485292][ T198] em28xx 3-1:0.0: board has no eeprom [ 754.609433][ T198] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 754.609472][ T198] em28xx 3-1:0.0: dvb set to bulk mode. [ 754.609595][ T5694] em28xx 3-1:0.0: Binding DVB extension [ 754.715011][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2371'. [ 754.986985][ T198] usb 3-1: USB disconnect, device number 35 [ 755.006580][ T198] em28xx 3-1:0.0: Disconnecting em28xx [ 755.168187][ T5694] em28xx 3-1:0.0: Registering input extension [ 755.168864][ T198] em28xx 3-1:0.0: Closing input extension [ 756.076993][ T198] em28xx: Freeing device [ 756.139339][ T37] audit: type=1800 audit(1785747421.095:148): pid=15404 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.2381" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 756.187146][T15404] netlink: 'syz.2.2381': attribute type 27 has an invalid length. [ 756.296937][T15404] team_slave_0: left promiscuous mode [ 756.296964][T15404] team_slave_0: left allmulticast mode [ 756.604338][T15420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2385'. [ 757.147394][T15435] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2389'. [ 758.529331][ T5694] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 758.679382][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 758.683464][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.683498][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 758.683517][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 32770, setting to 1024 [ 758.686321][ T5694] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 758.686362][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.686388][ T5694] usb 3-1: Product: syz [ 758.686399][ T5694] usb 3-1: Manufacturer: syz [ 758.686410][ T5694] usb 3-1: SerialNumber: syz [ 758.704850][ T5694] usb 3-1: config 0 descriptor?? [ 758.750599][ T5694] pegasus_notetaker 3-1:0.0: packet size is too small (0) [ 758.750908][ T5694] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 758.953470][ T5694] usb 3-1: USB disconnect, device number 36 [ 759.561443][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 759.564045][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 760.139447][ T5683] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 760.302093][ T5683] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 760.302125][ T5683] usb 3-1: config 0 has no interface number 0 [ 760.304754][ T5683] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 760.304787][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.304809][ T5683] usb 3-1: Product: syz [ 760.304825][ T5683] usb 3-1: Manufacturer: syz [ 760.304841][ T5683] usb 3-1: SerialNumber: syz [ 760.359116][ T5683] usb 3-1: config 0 descriptor?? [ 760.567988][ T5683] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 760.606872][T15488] netlink: 'syz.9.2402': attribute type 10 has an invalid length. [ 760.606916][T15488] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 760.606938][T15488] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 760.607182][T15488] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 760.652676][ T5683] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 760.653102][ T5683] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 760.653182][ T5683] usb 3-1: media controller created [ 760.693894][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 760.774254][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.571427][T15503] tmpfs: Unknown parameter 'smackfsdef' [ 761.794651][ T5683] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 761.853328][ T5683] usb 3-1: USB disconnect, device number 37 [ 762.232854][T15520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2410'. [ 763.050131][ T37] audit: type=1326 audit(1785747428.025:149): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15538 comm="syz.7.2417" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e446e019 code=0x0 [ 763.126176][T15541] fuse: fd is not a fuse device [ 763.429662][T15548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'. [ 764.740761][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 765.209617][ T5683] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 765.369381][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 765.372591][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 765.374899][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.374954][ T5683] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.378941][ T5683] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 765.378971][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.378994][ T5683] usb 3-1: Product: syz [ 765.379010][ T5683] usb 3-1: Manufacturer: syz [ 765.379027][ T5683] usb 3-1: SerialNumber: syz [ 765.692419][T15590] netlink: 'syz.4.2436': attribute type 1 has an invalid length. [ 765.710072][ T5683] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.710141][ T5683] usb 3-1: MIDIStreaming interface descriptor not found [ 765.833970][ T5683] usb 3-1: USB disconnect, device number 38 [ 765.967275][T13989] udevd[13989]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.944443][ T49] IPVS: starting estimator thread 0... [ 767.037076][T15617] IPVS: using max 8 ests per chain, 19200 per kthread [ 769.052566][ T5739] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 769.211588][ T5739] usb 3-1: device descriptor read/64, error -71 [ 769.479411][ T5739] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 769.546859][T15693] netlink: 'syz.7.2460': attribute type 7 has an invalid length. [ 769.620912][ T5739] usb 3-1: device descriptor read/64, error -71 [ 769.730141][ T5739] usb usb3-port1: attempt power cycle [ 770.089870][ T5739] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 770.120511][ T5739] usb 3-1: device descriptor read/8, error -71 [ 770.256282][T15712] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2465'. [ 770.276655][T15714] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2465'. [ 770.379829][ T5739] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 770.419115][ T5739] usb 3-1: device descriptor read/8, error -71 [ 770.485328][ T4910] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 770.520022][ T5739] usb usb3-port1: unable to enumerate USB device [ 772.144321][T15753] fuse: Unknown parameter '' [ 772.479372][ T49] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 772.639413][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 772.644093][ T49] usb 3-1: config 7 has an invalid interface number: 39 but max is 0 [ 772.644123][ T49] usb 3-1: config 7 has no interface number 0 [ 772.644159][ T49] usb 3-1: config 7 interface 39 has no altsetting 0 [ 772.646706][ T49] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=c7.71 [ 772.646738][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.646761][ T49] usb 3-1: Product: syz [ 772.646777][ T49] usb 3-1: Manufacturer: syz [ 772.646793][ T49] usb 3-1: SerialNumber: syz [ 773.085097][T15750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.085618][T15750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.109015][T15750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.133098][T15750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.136357][T15750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.137234][T15750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.218940][ T49] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 773.227216][ T49] gspca_vc032x: reg_w err -71 [ 773.227252][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227264][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227274][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227285][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227295][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227305][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227315][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227325][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227334][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227343][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227353][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227362][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227372][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227383][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227392][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227421][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227431][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227450][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227460][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.227471][ T49] gspca_vc032x: Unknown sensor... [ 773.227574][ T49] vc032x 3-1:7.39: probe with driver vc032x failed with error -22 [ 773.374402][T15758] GUP no longer grows the stack in syz.7.2482 (15758): 200000006000-200000008000 (200000004000) [ 773.374555][T15758] CPU: 0 UID: 0 PID: 15758 Comm: syz.7.2482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 773.374589][T15758] Tainted: [L]=SOFTLOCKUP [ 773.374598][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.374612][T15758] Call Trace: [ 773.374622][T15758] [ 773.374633][T15758] dump_stack_lvl+0xe8/0x150 [ 773.374670][T15758] fixup_user_fault+0x637/0x6f0 [ 773.374707][T15758] fault_in_user_writeable+0x71/0xd0 [ 773.374735][T15758] futex_lock_pi+0x7bc/0xac0 [ 773.374766][T15758] ? futex_unqueue+0x211/0x240 [ 773.374803][T15758] ? __pfx_futex_lock_pi+0x10/0x10 [ 773.374866][T15758] ? __pfx_futex_wake_mark+0x10/0x10 [ 773.374916][T15758] ? do_sock_getsockopt+0x71a/0x7e0 [ 773.374964][T15758] do_futex+0x330/0x4e0 [ 773.374999][T15758] ? __pfx_do_futex+0x10/0x10 [ 773.375036][T15758] __se_sys_futex+0x3a8/0x450 [ 773.375072][T15758] ? __pfx___se_sys_futex+0x10/0x10 [ 773.375098][T15758] ? rcu_is_watching+0x15/0xb0 [ 773.375132][T15758] ? __x64_sys_futex+0x21/0xf0 [ 773.375163][T15758] do_syscall_64+0x17b/0x530 [ 773.375188][T15758] ? irqentry_exit+0x10f/0x8f0 [ 773.375211][T15758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.375235][T15758] ? clear_bhb_loop+0x40/0x90 [ 773.375264][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.375288][T15758] RIP: 0033:0x7ff7e446e019 [ 773.375310][T15758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.375331][T15758] RSP: 002b:00007ff7e26c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 773.375355][T15758] RAX: ffffffffffffffda RBX: 00007ff7e46f5fa0 RCX: 00007ff7e446e019 [ 773.375373][T15758] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 773.375389][T15758] RBP: 00007ff7e450500c R08: 0000000000000000 R09: 0000000000000002 [ 773.375404][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.375418][T15758] R13: 00007ff7e46f6038 R14: 00007ff7e46f5fa0 R15: 00007fff33e15d78 [ 773.375455][T15758] [ 773.393262][ T49] usb 3-1: USB disconnect, device number 43 [ 774.302819][ T49] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 774.462164][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 774.464220][ T49] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 774.464251][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 774.464278][ T49] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 774.464298][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12592, setting to 1024 [ 774.464318][ T49] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 774.466836][ T49] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 774.466866][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.466889][ T49] usb 3-1: Product: syz [ 774.466905][ T49] usb 3-1: Manufacturer: syz [ 774.466922][ T49] usb 3-1: SerialNumber: syz [ 774.490744][ T49] usb 3-1: config 0 descriptor?? [ 774.577755][T15766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 774.697145][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 774.728397][ T49] port100 3-1:0.0: NFC: Could not get supported command types [ 774.782943][ T9] usb 3-1: USB disconnect, device number 44 [ 775.642172][ T37] audit: type=1326 audit(1785747440.615:150): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15804 comm="syz.2.2496" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0c4a6e019 code=0x0 [ 776.011189][T15319] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 776.188223][T15319] usb 3-1: not running at top speed; connect to a high speed hub [ 776.206255][T15319] usb 3-1: config 63 has an invalid interface number: 201 but max is 0 [ 776.206279][T15319] usb 3-1: config 63 has no interface number 0 [ 776.206316][T15319] usb 3-1: config 63 interface 201 altsetting 255 endpoint 0xD has invalid maxpacket 1056, setting to 64 [ 776.206336][T15319] usb 3-1: config 63 interface 201 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 776.206353][T15319] usb 3-1: config 63 interface 201 has no altsetting 0 [ 776.260579][T15319] usb 3-1: Dual-Role OTG device on HNP port [ 776.265015][T15319] usb 3-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice= 9.66 [ 776.265047][T15319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.265062][T15319] usb 3-1: Product: 鱗摺鏣㫓楖諥ꂠ텵㕄⾎来䭺榈渔䝦伖隰팣忎ᅖ镇䇮⫶䆖䅎蕧샟ꭗ㗙ꔗ䛿륰ﶩꋁꕓ䨭닺㕺릎ꔏ曚䠺－곝쾑솉斂鹧釣峹ᣵḀ㸢뙏뭋ꜶҚ㪋憠饊벌衱斔묱韂 [ 776.265084][T15319] usb 3-1: Manufacturer:  [ 776.265095][T15319] usb 3-1: SerialNumber: ఊ [ 777.065993][T15835] overlayfs: failed to resolve './file1': -2 [ 777.102483][T15835] overlay: Unknown parameter '' [ 777.133139][T15319] rtl8150 3-1:63.201: couldn't find required endpoints [ 777.134158][T15319] rtl8150 3-1:63.201: probe with driver rtl8150 failed with error -5 [ 777.185598][T15319] usb 3-1: USB disconnect, device number 45 [ 777.998165][ T37] audit: type=1800 audit(1785747442.945:151): pid=15865 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.2509" name="dbroot" dev="configfs" ino=57475 res=0 errno=0 [ 778.374930][T15875] netlink: 'syz.9.2510': attribute type 10 has an invalid length. [ 778.418355][T15875] team0: Device nlmon0 is of different type [ 778.480578][T15867] Config c/1 of g1 needs at least one function. [ 778.486534][T15867] udc usbip-vudc.0: failed to start g1: -22 [ 778.486567][T15867] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 778.778072][T13987] do_umount: task=syz-executor[13987] propagate_mount_busy()!=0 [ 778.787748][T13987] do_umount: task=syz-executor[13987] propagate_mount_busy()!=0 [ 778.842293][T15867] UDC core: g1: couldn't find an available UDC or it's busy [ 779.189489][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.189597][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.189643][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.348578][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.348677][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.348717][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.579775][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.579961][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2515'. [ 779.580019][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2515'. [ 780.681738][T13761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.757095][ T8977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 780.830795][ T8977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 780.850636][ T8977] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 780.851807][ T8977] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 780.852620][ T8977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 781.108931][T15897] xfrm0 speed is unknown, defaulting to 1000 [ 781.551229][T13761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.047835][T15916] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 782.047854][T15916] CIFS mount error: No usable UNC path provided in device string! [ 782.047854][T15916] [ 782.047871][T15916] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 782.178489][T13761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.826088][T13761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.878293][T15934] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2526'. [ 782.910576][ T8977] Bluetooth: hci5: command tx timeout [ 782.972375][T15902] xfrm0 speed is unknown, defaulting to 1000 [ 784.073002][T15902] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.077285][T15902] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.077620][T15902] bridge_slave_0: entered allmulticast mode [ 784.138238][T15902] bridge_slave_0: entered promiscuous mode [ 784.154099][T15902] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.154466][T15902] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.154784][T15902] bridge_slave_1: entered allmulticast mode [ 784.158260][T15902] bridge_slave_1: entered promiscuous mode [ 784.420079][T15902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.494189][T15955] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 784.569929][T15902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.794441][T13761] bridge_slave_1: left allmulticast mode [ 784.794480][T13761] bridge_slave_1: left promiscuous mode [ 784.794778][T13761] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.993884][ T8977] Bluetooth: hci5: command tx timeout [ 785.040426][T13761] bridge_slave_0: left allmulticast mode [ 785.040455][T13761] bridge_slave_0: left promiscuous mode [ 785.040733][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.420123][T13761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.470220][T13761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.517500][T13761] bond0 (unregistering): Released all slaves [ 786.595141][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 786.798115][T15902] team0: Port device team_slave_0 added [ 786.876052][T15902] team0: Port device team_slave_1 added [ 787.069625][ T8977] Bluetooth: hci5: command tx timeout [ 787.072148][T15902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.072165][T15902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.072205][T15902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.076356][T15902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.076371][T15902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.076403][T15902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.766481][T15902] hsr_slave_0: entered promiscuous mode [ 787.776011][T15902] hsr_slave_1: entered promiscuous mode [ 787.797041][T15902] debugfs: 'hsr0' already exists in 'hsr' [ 787.797073][T15902] Cannot create hsr debugfs directory [ 788.465227][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 788.821954][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.822454][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.822737][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.823004][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.823241][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.959336][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.959678][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 788.960494][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.019937][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.020222][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.020457][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.020712][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.020954][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.074902][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.075513][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.076205][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.087386][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.088038][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.154771][ T8977] Bluetooth: hci5: command tx timeout [ 789.221065][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.221268][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.221440][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.221608][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.221843][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.222025][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.222182][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.222337][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.224123][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.224323][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.224482][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.224640][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.224806][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.224967][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.225129][T16035] binfmt_misc: register: failed to install interpreter file ./file0 [ 789.610258][T13761] hsr_slave_0: left promiscuous mode [ 789.649426][T13761] hsr_slave_1: left promiscuous mode [ 789.657276][T13761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.657300][T13761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.674067][T13761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.674143][T13761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.751904][T13761] veth1_macvtap: left promiscuous mode [ 789.751983][T13761] veth0_macvtap: left promiscuous mode [ 789.776748][T13761] veth1_vlan: left promiscuous mode [ 789.776989][T13761] veth0_vlan: left promiscuous mode [ 791.040078][T13761] team0 (unregistering): Port device team_slave_1 removed [ 791.100029][T13761] team0 (unregistering): Port device team_slave_0 removed [ 792.142341][T15902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.274163][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 793.105719][T15902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.437829][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 793.867738][T15902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.058810][T13761] IPVS: stop unused estimator thread 0... [ 794.332120][T15902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.873318][T15902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 794.926092][T15902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 794.927299][T15902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 794.946601][T15902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.962560][T15902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 794.985143][T15902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.994219][T15902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.037969][T15902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.201892][T15902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.242794][T15902] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.273084][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.273304][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.303817][T13424] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.304058][T13424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.909023][T15902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.032270][T15902] veth0_vlan: entered promiscuous mode [ 796.058569][T15902] veth1_vlan: entered promiscuous mode [ 796.126827][T15902] veth0_macvtap: entered promiscuous mode [ 796.141001][T15902] veth1_macvtap: entered promiscuous mode [ 796.285844][T15902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.334759][T15902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.385066][T13761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.398269][T13761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.410768][T13761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.415663][T13761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.585340][T16118] __nla_validate_parse: 1 callbacks suppressed [ 796.585361][T16118] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2559'. [ 798.267216][T13761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.267241][T13761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.393372][ T3357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.393389][ T3357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.857737][T16124] netlink: 512 bytes leftover after parsing attributes in process `syz.7.2561'. [ 801.677424][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 802.018331][T16150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.018920][T16150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.076319][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 802.224583][T16155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2570'. [ 802.224608][T16155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2570'. [ 802.224629][T16155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2570'. [ 803.508107][ T4910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 803.574398][ T4910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 803.588484][ T4910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 803.597236][ T4910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 803.598130][ T4910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 804.588202][T16163] xfrm0 speed is unknown, defaulting to 1000 [ 805.175961][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.176311][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.176565][T16163] bridge_slave_0: entered allmulticast mode [ 805.185006][T16163] bridge_slave_0: entered promiscuous mode [ 805.263049][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.266213][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.266538][T16163] bridge_slave_1: entered allmulticast mode [ 805.275091][T16163] bridge_slave_1: entered promiscuous mode [ 805.474746][T16163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.508141][T16163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.750740][T16163] team0: Port device team_slave_0 added [ 805.775033][T16163] team0: Port device team_slave_1 added [ 806.030338][ T8977] Bluetooth: hci6: command tx timeout [ 806.072709][T16163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.072728][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.072758][T16163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.153107][T16163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.153126][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.153158][T16163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.606750][T16163] hsr_slave_0: entered promiscuous mode [ 806.617963][T16163] hsr_slave_1: entered promiscuous mode [ 806.640587][T16163] debugfs: 'hsr0' already exists in 'hsr' [ 806.640618][T16163] Cannot create hsr debugfs directory [ 807.683838][T16267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.112927][ T8977] Bluetooth: hci6: command tx timeout [ 808.685205][T16290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2587'. [ 808.756816][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.756911][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.008449][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2587'. [ 810.189845][ T8977] Bluetooth: hci6: command tx timeout [ 810.483496][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.484135][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.144860][T16163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 811.187330][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 811.189147][T16163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 811.256060][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 811.256952][T16163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 811.344780][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 811.385898][T16163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 811.453711][T16163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 811.671930][T16163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.796705][T16163] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.856970][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.858021][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.008313][T12231] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.008490][T12231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.269760][ T8977] Bluetooth: hci6: command tx timeout [ 813.647083][T16163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.458267][T16163] veth0_vlan: entered promiscuous mode [ 814.557951][T16163] veth1_vlan: entered promiscuous mode [ 814.692809][T16163] veth0_macvtap: entered promiscuous mode [ 814.802061][T16163] veth1_macvtap: entered promiscuous mode [ 815.221243][T16163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.288612][T16163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.376495][T13763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.376800][T13763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.376845][T13763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.376885][T13763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.918796][T13424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.918818][T13424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.359337][T13761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.359358][T13761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.406660][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2617'. [ 821.453069][ T37] audit: type=1326 audit(1785747486.425:152): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16588 comm="syz.0.2622" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3cc1ce019 code=0x0 [ 822.972699][T16600] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 822.972728][T16600] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 823.032185][T16600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 823.032206][T16600] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 823.080655][T16600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 823.080690][T16600] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 823.214028][T16600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.214049][T16600] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 823.307218][T16600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.307245][T16600] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 823.420289][T16600] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 823.420322][T16600] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 823.570965][T16600] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 823.570991][T16600] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 826.005979][T16663] netlink: 512 bytes leftover after parsing attributes in process `syz.7.2642'. [ 826.589428][ T49] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 826.743656][ T49] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 826.743679][ T49] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 826.743694][ T49] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 826.743730][ T49] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 826.743755][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 826.746305][ T49] usb 6-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 826.746336][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.746351][ T49] usb 6-1: Product: syz [ 826.746362][ T49] usb 6-1: Manufacturer: syz [ 826.746373][ T49] usb 6-1: SerialNumber: syz [ 826.827829][ T49] usb 6-1: config 0 descriptor?? [ 826.828686][T16670] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 827.062120][ T49] keyspan 6-1:0.0: Keyspan 4 port adapter converter detected [ 827.065840][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 827.087501][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 827.087600][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 827.118023][ T49] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 827.130620][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 82 [ 827.130685][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 827.132569][ T49] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 827.136431][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 827.136492][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 827.185392][ T49] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 827.192820][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 84 [ 827.193066][ T49] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 827.212647][ T49] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 827.225549][ T49] usb 6-1: USB disconnect, device number 60 [ 827.238494][ T49] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 827.263972][ T49] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 827.278693][ T49] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 827.302521][ T49] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 827.308547][ T49] keyspan 6-1:0.0: device disconnected [ 827.909350][ T49] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 828.089592][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 828.096863][ T49] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.096902][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 828.096936][ T49] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 828.096954][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.161385][ T49] usb 6-1: config 0 descriptor?? [ 828.600770][T16677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.606814][T16677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.637092][ T49] hid_parser_main: 461 callbacks suppressed [ 828.637117][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.637164][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.638888][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.638921][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.638950][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.639071][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.639100][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.639129][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.640749][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.640781][ T49] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 828.780427][ T49] dragonrise 0003:0079:0011.0015: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0 [ 828.814527][ T9] usb 6-1: USB disconnect, device number 61 [ 829.024132][T16681] fido_id[16681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 831.164185][ T5739] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 831.329350][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 831.332150][ T5739] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.332174][ T5739] usb 6-1: config 0 interface 0 has no altsetting 0 [ 831.332199][ T5739] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 831.332216][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.336408][ T5739] usb 6-1: config 0 descriptor?? [ 832.313190][ T5739] usbhid 6-1:0.0: can't add hid device: -71 [ 832.313322][ T5739] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 832.338758][ T5739] usb 6-1: USB disconnect, device number 62 [ 832.481357][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2658'. [ 834.310243][ T37] audit: type=1326 audit(1785747499.285:153): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.310947][ T37] audit: type=1326 audit(1785747499.285:154): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.311000][ T37] audit: type=1326 audit(1785747499.285:155): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.311048][ T37] audit: type=1326 audit(1785747499.285:156): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.311561][ T37] audit: type=1326 audit(1785747499.285:157): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.466060][ T37] audit: type=1326 audit(1785747499.435:158): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.466252][ T37] audit: type=1326 audit(1785747499.435:159): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.521078][ T37] audit: type=1326 audit(1785747499.445:160): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.521138][ T37] audit: type=1326 audit(1785747499.445:161): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 834.521182][ T37] audit: type=1326 audit(1785747499.485:162): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16755 comm="syz.5.2669" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2370cce019 code=0x7ffc0000 [ 836.864421][T16769] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 837.899432][ T49] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 838.052577][ T49] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 838.052610][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.060746][ T49] usb 6-1: config 0 descriptor?? [ 838.091482][ T49] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 838.289132][T16777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.293855][T16777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.296588][ T49] gp8psk: usb in 128 operation failed. [ 838.297031][ T49] gp8psk: usb in 137 operation failed. [ 838.297049][ T49] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 838.297090][ T49] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 838.348680][ T49] usb 6-1: USB disconnect, device number 63 [ 838.488944][T16787] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.2678'. [ 838.680259][ T49] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 838.834617][ T49] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 838.834652][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.841603][ T49] usb 6-1: config 0 descriptor?? [ 838.886894][ T49] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 839.270841][ T49] gp8psk: usb in 137 operation failed. [ 839.270869][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.271795][ T49] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 839.271856][ T49] usb 6-1: media controller created [ 839.396017][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.577963][ T49] gp8psk_fe: Frontend attached [ 839.623114][ T49] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 839.678296][ T49] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 839.819918][T16810] syzkaller1: entered promiscuous mode [ 839.819944][T16810] syzkaller1: entered allmulticast mode [ 840.096756][ T49] gp8psk: usb in 138 operation failed. [ 840.096771][ T49] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 840.096781][ T49] gp8psk: found Genpix USB device pID = 203 (hex) [ 840.108984][ T49] usb 6-1: USB disconnect, device number 64 [ 840.879559][ T49] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 841.219638][ T49] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 841.335720][T16836] XFS (nbd4): SB validate failed with error -5. [ 841.463456][ T49] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 841.463487][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.463513][ T49] usb 6-1: Product: syz [ 841.463524][ T49] usb 6-1: Manufacturer: syz [ 841.463535][ T49] usb 6-1: SerialNumber: syz [ 841.468572][ T49] usb 6-1: config 0 descriptor?? [ 841.571791][ T49] go7007 6-1:0.0: Sensoray 2250 found [ 841.573684][ T49] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 841.724071][T16835] XFS (nbd4): SB validate failed with error -5. [ 841.831344][ T9] usb 6-1: USB disconnect, device number 65 [ 842.999323][ T5739] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 843.157837][ T5739] usb 6-1: config index 0 descriptor too short (expected 2075, got 27) [ 843.157876][ T5739] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 843.157897][ T5739] usb 6-1: config 0 has no interface number 0 [ 843.157939][ T5739] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 843.157960][ T5739] usb 6-1: config 0 interface 200 has no altsetting 0 [ 843.205621][ T5739] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 843.205645][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.205660][ T5739] usb 6-1: Product: syz [ 843.205671][ T5739] usb 6-1: Manufacturer: syz [ 843.205682][ T5739] usb 6-1: SerialNumber: syz [ 843.243312][ T5739] usb 6-1: config 0 descriptor?? [ 843.481462][T16866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.483387][T16866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.161439][T16878] kAFS: unable to lookup cell 'yz0' [ 844.636585][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 844.916188][ T5739] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input29 [ 844.968925][ T5739] usb 6-1: USB disconnect, device number 66 [ 845.288204][T16904] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2708'. [ 846.116952][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 846.449878][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 846.525896][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2713'. [ 846.528591][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2713'. [ 846.539110][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2713'. [ 846.599277][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 846.612808][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 846.618235][ T9] usb 6-1: config 1 has an invalid interface number: 17 but max is 0 [ 846.618264][ T9] usb 6-1: config 1 has no interface number 0 [ 846.618297][ T9] usb 6-1: config 1 interface 17 has no altsetting 0 [ 846.657634][ T9] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 846.657665][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.657688][ T9] usb 6-1: Product: syz [ 846.657704][ T9] usb 6-1: Manufacturer: syz [ 846.657720][ T9] usb 6-1: SerialNumber: syz [ 847.015031][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 850.630011][T17019] sg_write: data in/out 255806/136 bytes for SCSI command 0x0-- guessing data in; [ 850.630011][T17019] program syz.0.2730 not setting count and/or reply_len properly [ 851.035881][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.065157][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.090556][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.091251][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.098435][T17031] netlink: 'syz.5.2733': attribute type 1 has an invalid length. [ 851.098457][T17031] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2733'. [ 851.658660][T17044] block nbd0: NBD_DISCONNECT [ 851.704350][T17044] block nbd0: Send disconnect failed -32 [ 851.745720][T17041] block nbd0: Disconnected due to user request. [ 851.745768][T17041] block nbd0: shutting down sockets [ 851.768741][ T9] pcwd_usb: This driver only supports 1 device [ 851.791511][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 852.253645][T17056] netlink: 'syz.5.2741': attribute type 1 has an invalid length. [ 852.324277][T15162] usb 6-1: USB disconnect, device number 67 [ 852.680349][T15162] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 852.829796][T15162] usb 6-1: Using ep0 maxpacket: 16 [ 852.836540][T15162] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 852.836576][T15162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.836598][T15162] usb 6-1: Product: syz [ 852.836620][T15162] usb 6-1: Manufacturer: syz [ 852.836636][T15162] usb 6-1: SerialNumber: syz [ 852.852148][T15162] usb 6-1: config 0 descriptor?? [ 852.897631][T15162] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 853.164192][T17063] 9pnet_fd: Insufficient options for proto=fd [ 853.516472][T17074] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2747'. [ 853.516492][T17074] openvswitch: netlink: Flow key attr not present in new flow. [ 853.599800][T15162] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 853.645794][ T9] usb 6-1: USB disconnect, device number 68 [ 854.619310][ T5695] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 854.749507][ T5695] usb 6-1: device descriptor read/64, error -71 [ 854.999356][ T5695] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 855.129353][ T5695] usb 6-1: device descriptor read/64, error -71 [ 855.242407][ T5695] usb usb6-port1: attempt power cycle [ 855.580892][ T5695] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 855.599931][ T5695] usb 6-1: device descriptor read/8, error -71 [ 855.839327][ T5695] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 855.861426][ T5695] usb 6-1: device descriptor read/8, error -71 [ 855.971723][ T5695] usb usb6-port1: unable to enumerate USB device [ 858.049370][ T5695] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 858.207966][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 858.228206][ T5695] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 858.228237][ T5695] usb 6-1: config 0 has no interface number 0 [ 858.228268][ T5695] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 858.228287][ T5695] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 858.273292][ T5695] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 858.273330][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.273347][ T5695] usb 6-1: Product: syz [ 858.273358][ T5695] usb 6-1: Manufacturer: syz [ 858.273368][ T5695] usb 6-1: SerialNumber: syz [ 858.317465][ T5695] usb 6-1: config 0 descriptor?? [ 858.318297][T17119] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 858.318423][T17119] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 858.347658][T17128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2767'. [ 858.525390][T17119] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 858.525551][T17119] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 858.664301][T17134] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 858.699713][T17133] 9p: Bad value for 'afid' [ 858.731891][ T5695] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 858.942129][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 859.148811][T17119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.160477][T17119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.376593][ T5695] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 859.376627][ T5695] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 859.399656][ T5695] asix 6-1:0.34: probe with driver asix failed with error -71 [ 859.416422][ T5695] usb 6-1: USB disconnect, device number 73 [ 860.042668][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2773'. [ 860.686274][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2776'. [ 860.949292][ T49] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 861.104959][ T49] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 861.104992][ T49] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 861.109573][ T49] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 861.109604][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.109625][ T49] usb 6-1: Product: syz [ 861.109641][ T49] usb 6-1: Manufacturer: syz [ 861.109657][ T49] usb 6-1: SerialNumber: syz [ 861.167084][ T49] usb 6-1: config 0 descriptor?? [ 861.186301][ T49] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 861.630185][T17173] netlink: 'syz.0.2779': attribute type 4 has an invalid length. [ 861.636834][T17172] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2779'. [ 861.834062][ T49] gspca_sunplus: reg_r err -71 [ 861.834159][ T49] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 861.861189][ T49] usb 6-1: USB disconnect, device number 74 [ 862.905545][T17193] pim6reg: entered allmulticast mode [ 863.036905][T17197] pim6reg: left allmulticast mode [ 863.698278][T17207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.791347][T17211] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2792'. [ 864.293043][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2794'. [ 865.199843][T17220] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 865.222653][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2802'. [ 865.223947][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2802'. [ 865.813097][T17264] hsr0: entered promiscuous mode [ 865.909371][ T49] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 866.062387][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.062425][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.062453][ T49] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 866.062471][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.067889][ T49] usb 6-1: config 0 descriptor?? [ 866.483549][T17262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.484272][T17262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.513009][ T49] hid_parser_main: 30 callbacks suppressed [ 866.513033][ T49] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 866.513068][ T49] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 866.513096][ T49] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 866.513123][ T49] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 866.513150][ T49] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 866.570827][ T49] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 866.690581][T17262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.692811][T17262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.695409][ T49] playstation 0003:054C:0DF2.0016: Invalid reportID received, expected 9 got 0 [ 866.695440][ T49] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense pairing info: -22 [ 866.695496][ T49] playstation 0003:054C:0DF2.0016: Failed to get MAC address from DualSense [ 866.695512][ T49] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 866.720405][ T49] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -22 [ 866.900179][T13185] usb 6-1: USB disconnect, device number 75 [ 867.786623][T17274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2809'. [ 868.852796][T17296] block nbd0: server does not support multiple connections per device. [ 868.853213][T17296] block nbd0: shutting down sockets [ 868.859305][ T49] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 869.029702][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 869.036732][T17297] block nbd1: server does not support multiple connections per device. [ 869.038855][ T49] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 869.038885][ T49] usb 6-1: config 0 has no interface number 0 [ 869.038934][ T49] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 869.038963][ T49] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 869.106321][T17297] block nbd1: shutting down sockets [ 869.115104][ T49] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 869.115126][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.115159][ T49] usb 6-1: Product: syz [ 869.115170][ T49] usb 6-1: Manufacturer: syz [ 869.115181][ T49] usb 6-1: SerialNumber: syz [ 869.134107][ T49] usb 6-1: config 0 descriptor?? [ 869.147280][T17292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 869.154709][T17292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 869.362186][T17292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 869.362551][T17292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 869.573095][ T49] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 869.573399][ T49] asix 6-1:0.34: probe with driver asix failed with error -61 [ 869.764824][T17318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.210702][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.210782][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.377479][T17320] netlink: 'syz.7.2821': attribute type 7 has an invalid length. [ 871.625867][ T49] usb 6-1: USB disconnect, device number 76 [ 872.079532][T17345] tipc: Started in network mode [ 872.079570][T17345] tipc: Node identity , cluster identity 4711 [ 872.079586][T17345] tipc: Failed to set node id, please configure manually [ 872.079631][T17345] tipc: Enabling of bearer rejected, failed to enable media [ 872.729391][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 872.788937][ T49] IPVS: starting estimator thread 0... [ 872.870407][T17374] IPVS: using max 9 ests per chain, 21600 per kthread [ 872.886322][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 872.894281][ T9] usb 6-1: config 6 has an invalid interface number: 213 but max is 1 [ 872.894313][ T9] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 872.894343][ T9] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 872.894369][ T9] usb 6-1: config 6 has no interface number 0 [ 872.894422][ T9] usb 6-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.894449][ T9] usb 6-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 872.894480][ T9] usb 6-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 872.894513][ T9] usb 6-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.897137][ T9] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 872.897167][ T9] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 872.897187][ T9] usb 6-1: Manufacturer: syz [ 872.897202][ T9] usb 6-1: SerialNumber: syz [ 873.234952][ T9] em28xx 6-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 873.234992][ T9] em28xx 6-1:6.213: Audio interface 213 found (Vendor Class) [ 873.326464][ T9] em28xx 6-1:6.213: unknown em28xx chip ID (0) [ 873.326974][ T9] em28xx 6-1:6.213: Config register raw data: 0xfffffffb [ 873.327435][ T9] em28xx 6-1:6.213: AC97 chip type couldn't be determined [ 873.327458][ T9] em28xx 6-1:6.213: No AC97 audio processor [ 873.366755][ T9] usb 6-1: USB disconnect, device number 77 [ 873.375841][ T9] em28xx 6-1:6.213: Disconnecting em28xx [ 873.410175][ T9] em28xx: Freeing device [ 873.796211][T17380] CIFS mount error: No usable UNC path provided in device string! [ 873.796211][T17380] [ 873.796237][T17380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 874.030678][ T49] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 874.186016][ T49] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.186043][ T49] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 874.186096][ T49] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 874.186121][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.233378][ T49] usb 6-1: config 0 descriptor?? [ 874.256131][ T49] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 874.256195][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 874.303732][ T49] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 874.304670][ T49] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 874.304725][ T49] usb 6-1: media controller created [ 874.339065][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.440641][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 874.440839][ T49] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 874.446035][ T49] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 874.476790][ T49] dvb-usb: schedule remote query interval to 150 msecs. [ 874.476814][ T49] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 874.533443][ T5581] usb 6-1: USB disconnect, device number 78 [ 874.625800][ T5581] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 875.349420][ T5581] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 875.480555][ T5581] usb 6-1: device descriptor read/64, error -71 [ 875.719419][ T5581] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 875.849319][ T5581] usb 6-1: device descriptor read/64, error -71 [ 875.966878][ T5581] usb usb6-port1: attempt power cycle [ 876.349629][ T5581] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 876.372201][ T5581] usb 6-1: device descriptor read/8, error -71 [ 876.609323][ T5581] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 876.630975][ T5581] usb 6-1: device descriptor read/8, error -71 [ 876.741399][ T5581] usb usb6-port1: unable to enumerate USB device [ 877.364347][T17422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2855'. [ 877.364375][T17422] netlink: 'syz.4.2855': attribute type 3 has an invalid length. [ 878.023197][T17439] usb usb9: usbfs: process 17439 (syz.7.2860) did not claim interface 0 before use [ 878.147379][T17446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.147991][T17446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.539465][T13185] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 878.722647][T13185] usb 6-1: unable to get BOS descriptor or descriptor too short [ 878.723919][T13185] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.723946][T13185] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 878.726648][T13185] usb 6-1: New USB device found, idVendor=0582, idProduct=2b8d, bcdDevice= 0.40 [ 878.726678][T13185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.726700][T13185] usb 6-1: Product: syz [ 878.726716][T13185] usb 6-1: Manufacturer: syz [ 878.726733][T13185] usb 6-1: SerialNumber: syz [ 878.999609][ T49] usb 6-1: USB disconnect, device number 83 [ 879.671322][T17450] netlink: 18 bytes leftover after parsing attributes in process `syz.5.2863'. [ 880.201502][T17458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2865'. [ 881.412071][T17488] syz.4.2873: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 881.412675][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.4.2873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 881.412707][T17488] Tainted: [L]=SOFTLOCKUP [ 881.412716][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.412732][T17488] Call Trace: [ 881.412741][T17488] [ 881.412751][T17488] dump_stack_lvl+0xe8/0x150 [ 881.412792][T17488] warn_alloc+0x24c/0x270 [ 881.412825][T17488] ? __se_sys_ioctl+0x47/0x170 [ 881.412855][T17488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.412881][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.412914][T17488] ? __pfx_warn_alloc+0x10/0x10 [ 881.412964][T17488] ? register_lock_class+0x31/0x2e0 [ 881.413001][T17488] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 881.413041][T17488] __vmalloc_node_range_noprof+0x130/0x1560 [ 881.413074][T17488] ? __lock_acquire+0x6df/0x2e40 [ 881.413117][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413149][T17488] ? kasan_quarantine_put+0xbb/0x1f0 [ 881.413195][T17488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 881.413236][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413266][T17488] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 881.413305][T17488] vmalloc_noprof+0xb2/0xe0 [ 881.413336][T17488] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 881.413374][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413403][T17488] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 881.413441][T17488] ? dvb_demux_do_ioctl+0x323/0x540 [ 881.413480][T17488] dvb_demux_do_ioctl+0x460/0x540 [ 881.413515][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413548][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413577][T17488] dvb_usercopy+0x199/0x2e0 [ 881.413609][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413640][T17488] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 881.413676][T17488] ? __pfx_dvb_usercopy+0x10/0x10 [ 881.413723][T17488] ? __fget_files+0x3a8/0x420 [ 881.413747][T17488] ? __fget_files+0x2a/0x420 [ 881.413772][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413802][T17488] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 881.413837][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.413866][T17488] dvb_demux_ioctl+0x29/0x40 [ 881.413902][T17488] __se_sys_ioctl+0xff/0x170 [ 881.413936][T17488] do_syscall_64+0x17b/0x530 [ 881.413959][T17488] ? irqentry_exit+0x10f/0x8f0 [ 881.413981][T17488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.414004][T17488] ? clear_bhb_loop+0x40/0x90 [ 881.414033][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.414057][T17488] RIP: 0033:0x7f114d87e019 [ 881.414079][T17488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.414107][T17488] RSP: 002b:00007f114bad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.414131][T17488] RAX: ffffffffffffffda RBX: 00007f114db05fa0 RCX: 00007f114d87e019 [ 881.414149][T17488] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 881.414166][T17488] RBP: 00007f114d91500c R08: 0000000000000000 R09: 0000000000000000 [ 881.414187][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.414201][T17488] R13: 00007f114db06038 R14: 00007f114db05fa0 R15: 00007ffe1f0a1038 [ 881.414229][T17488] ? __UNIQUE_ID_modinfo_13356+0x64a25517/0xffffffffffed23cd [ 881.414267][T17488] [ 881.414414][T17488] Mem-Info: [ 881.414427][T17488] active_anon:8313 inactive_anon:14 isolated_anon:0 [ 881.414427][T17488] active_file:3498 inactive_file:14208 isolated_file:0 [ 881.414427][T17488] unevictable:769 dirty:32 writeback:0 [ 881.414427][T17488] slab_reclaimable:12585 slab_unreclaimable:114384 [ 881.414427][T17488] mapped:40730 shmem:1347 pagetables:2201 [ 881.414427][T17488] sec_pagetables:0 bounce:0 [ 881.414427][T17488] kernel_misc_reclaimable:0 [ 881.414427][T17488] free:1289549 free_pcp:2570 free_cma:0 [ 881.414540][T17488] Node 0 active_anon:33252kB inactive_anon:56kB active_file:13992kB inactive_file:56696kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:162920kB dirty:128kB writeback:0kB shmem:3852kB kernel_stack:16924kB pagetables:8608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 881.414601][T17488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 881.414656][T17488] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.414724][T17488] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 881.414767][T17488] Node 0 DMA32 free:1206784kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33252kB inactive_anon:56kB active_file:13992kB inactive_file:56696kB unevictable:1540kB writepending:128kB zspages:1384kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:10280kB local_pcp:1196kB free_cma:0kB [ 881.414837][T17488] lowmem_reserve[]: 0 0 0 0 0 [ 881.414877][T17488] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.414941][T17488] lowmem_reserve[]: 0 0 0 0 0 [ 881.414981][T17488] Node 1 Normal free:3936052kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.415050][T17488] lowmem_reserve[]: 0 0 0 0 0 [ 881.415097][T17488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 881.415979][T17488] Node 0 DMA32: 1014*4kB (UME) 717*8kB (UME) 935*16kB (UME) 1220*32kB (UME) 1019*64kB (UME) 258*128kB (UME) 175*256kB (UM) 63*512kB (UM) 15*1024kB (M) 21*2048kB (UME) 222*4096kB (UM) = 1206768kB [ 881.416319][T17488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 881.416439][T17488] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 12*16kB (UM) 5*32kB (UM) 8*64kB (UM) 7*128kB (UM) 2*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 959*4096kB (M) = 3936052kB [ 881.416643][T17488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.416664][T17488] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 881.416684][T17488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.416704][T17488] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 881.416723][T17488] 19078 total pagecache pages [ 881.416769][T17488] 28 pages in swap cache [ 881.416778][T17488] Free swap = 123568kB [ 881.416788][T17488] Total swap = 124996kB [ 881.416799][T17488] 2097051 pages RAM [ 881.416808][T17488] 0 pages HighMem/MovableOnly [ 881.416816][T17488] 427780 pages reserved [ 881.416825][T17488] 0 pages cma reserved [ 882.784946][T17499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.785595][T17499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.295866][T17514] nfs: Unknown parameter 'obj_type' [ 883.540225][ T49] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 883.689333][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 883.692850][ T49] usb 6-1: config index 0 descriptor too short (expected 259, got 119) [ 883.692880][ T49] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.692903][ T49] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 883.695638][ T49] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 883.695673][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.695688][ T49] usb 6-1: Product: syz [ 883.695699][ T49] usb 6-1: Manufacturer: syz [ 883.695711][ T49] usb 6-1: SerialNumber: syz [ 883.768095][ T49] usb 6-1: config 0 descriptor?? [ 883.985824][ T49] usb 6-1: USB disconnect, device number 84 [ 884.789578][ T5695] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 884.929401][ T5695] usb 6-1: device descriptor read/64, error -71 [ 885.169336][ T5695] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 885.299308][ T5695] usb 6-1: device descriptor read/64, error -71 [ 885.410198][ T5695] usb usb6-port1: attempt power cycle [ 885.759620][ T5695] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 885.782450][ T5695] usb 6-1: device descriptor read/8, error -71 [ 886.039435][ T5695] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 886.062194][ T5695] usb 6-1: device descriptor read/8, error -71 [ 886.181172][ T5695] usb usb6-port1: unable to enumerate USB device [ 887.617496][T17557] bridge0: entered promiscuous mode [ 887.790065][T17556] bridge0: left promiscuous mode [ 887.860104][T17560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.864176][T17560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.002023][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2897'. [ 888.287879][T17566] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2898'. [ 888.852071][T17576] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2901'. [ 888.895391][T17578] syzkaller1: entered promiscuous mode [ 888.895409][T17578] syzkaller1: entered allmulticast mode [ 888.938534][T17578] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.988612][T17578] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.997861][T17578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.683739][T12231] nvmet: connect request for invalid subsystem n! [ 889.684001][T17599] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 890.103814][ T5695] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 890.294504][ T5695] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 890.294543][ T5695] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 890.294572][ T5695] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 890.296956][ T5695] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 890.296988][ T5695] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 890.297011][ T5695] usb 6-1: Manufacturer: syz [ 890.297028][ T5695] usb 6-1: SerialNumber: syz [ 890.320738][T17605] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2909'. [ 890.355845][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2909'. [ 890.621803][ T5695] yealink 6-1:36.0: invalid payload size 0, expected 16 [ 890.640522][ T5695] input: Yealink usb-p1k as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:36.0/input/input32 [ 890.647829][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.648077][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.648316][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.648552][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.648789][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.649025][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.649313][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.649561][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 890.649583][ C0] yealink 6-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 890.693045][ T5755] kworker/0:7 (5755) used greatest stack depth: 15184 bytes left [ 890.748343][ T5695] usb 6-1: USB disconnect, device number 89 [ 892.047949][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'. [ 892.169322][ T5695] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 892.309964][ T5695] usb 6-1: device descriptor read/64, error -71 [ 892.549383][ T5695] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 892.680899][ T5695] usb 6-1: device descriptor read/64, error -71 [ 892.791120][ T5695] usb usb6-port1: attempt power cycle [ 893.149507][ T5695] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 893.170013][ T5695] usb 6-1: device descriptor read/8, error -71 [ 893.409326][ T5695] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 893.442357][ T5695] usb 6-1: device descriptor read/8, error -71 [ 893.521857][ T37] kauditd_printk_skb: 252 callbacks suppressed [ 893.521877][ T37] audit: type=1326 audit(1785747558.495:415): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17640 comm="syz.0.2922" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3cc1ce019 code=0x0 [ 893.551045][ T5695] usb usb6-port1: unable to enumerate USB device [ 894.343271][T17661] sg_write: data in/out 418268/96 bytes for SCSI command 0x0-- guessing data in; [ 894.343271][T17661] program syz.0.2928 not setting count and/or reply_len properly [ 894.595460][T17669] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 895.166000][T17680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2934'. [ 895.187756][T17680] sctp: [Deprecated]: syz.0.2934 (pid 17680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 895.187756][T17680] Use struct sctp_sack_info instead [ 895.293866][T17683] tmpfs: Bad value for 'mpol' [ 895.511455][T17687] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2937'. [ 895.637641][T17690] tipc: Started in network mode [ 895.637659][T17690] tipc: Node identity 4, cluster identity 4711 [ 895.637670][T17690] tipc: Node number set to 4 [ 896.923026][T17727] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2950'. [ 896.955838][T17727] tmpfs: Bad value for 'mpol' [ 897.793370][ T4910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 897.953240][ T4910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 898.001116][ T4910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 898.029405][ T4910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 898.060580][ T4910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 898.316276][ T8977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 898.327824][ T8977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 898.374990][ T8977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 898.416253][ T8977] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 898.422632][ T8977] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 899.209383][ T5683] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 899.406299][ T5683] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.406388][ T5683] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.406439][ T5683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 899.406464][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.518815][ T5683] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 899.907482][ T6129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.021291][T17732] xfrm0 speed is unknown, defaulting to 1000 [ 900.322372][ T6129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.689906][ T6129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.932352][ T8977] Bluetooth: hci7: command tx timeout [ 901.176528][T17732] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.176900][T17732] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.177156][T17732] bridge_slave_0: entered allmulticast mode [ 901.183463][T17732] bridge_slave_0: entered promiscuous mode [ 901.203617][T17732] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.206430][T17732] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.208261][T17732] bridge_slave_1: entered allmulticast mode [ 901.238249][T17732] bridge_slave_1: entered promiscuous mode [ 901.259511][T17738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 901.351497][T13185] usb 6-1: USB disconnect, device number 94 [ 901.425489][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.531050][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.853956][T17732] team0: Port device team_slave_0 added [ 901.865441][T17732] team0: Port device team_slave_1 added [ 902.508491][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.508511][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.508544][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.622932][T17782] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2957'. [ 902.625451][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.625466][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.625494][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.990796][ T8977] Bluetooth: hci7: command tx timeout [ 903.159346][T13185] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 903.339439][T13185] usb 6-1: Using ep0 maxpacket: 32 [ 903.343750][T13185] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.343842][T13185] usb 6-1: config 0 interface 0 has no altsetting 0 [ 903.343933][T13185] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 903.344001][T13185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.393275][T17732] hsr_slave_0: entered promiscuous mode [ 903.425400][T17732] hsr_slave_1: entered promiscuous mode [ 903.427470][T17732] debugfs: 'hsr0' already exists in 'hsr' [ 903.427496][T17732] Cannot create hsr debugfs directory [ 903.437086][T13185] usb 6-1: config 0 descriptor?? [ 903.576909][T17795] fuse: Unknown parameter '18446744073709551615' [ 903.881347][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881387][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881416][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881444][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881474][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881502][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881531][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881559][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881587][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.881615][T13185] dragonrise 0003:0079:0011.0017: unknown main item tag 0x0 [ 903.969458][T13185] dragonrise 0003:0079:0011.0017: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0 [ 904.088468][ T5739] usb 6-1: USB disconnect, device number 95 [ 904.277178][T17798] fido_id[17798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 904.301320][ T6129] bridge_slave_1: left allmulticast mode [ 904.301348][ T6129] bridge_slave_1: left promiscuous mode [ 904.301562][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.500395][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.770801][T17801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2963'. [ 904.770824][T17801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2963'. [ 904.814320][T17801] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 904.815934][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'. [ 905.047621][ T4910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 905.105558][ T5595] Bluetooth: hci7: command tx timeout [ 905.127958][ T4910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 905.136993][ T4910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 905.138237][ T4910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 905.207015][ T4910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 906.210179][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.280103][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.322274][ T6129] bond0 (unregistering): Released all slaves [ 906.597171][ T6129] : left promiscuous mode [ 906.969356][T13185] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 907.200335][ T4910] Bluetooth: hci7: command tx timeout [ 907.257863][T13185] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 907.257895][T13185] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.257922][T13185] usb 6-1: config 0 has no interface number 0 [ 907.265294][T13185] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 907.265329][T13185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.265352][T13185] usb 6-1: Product: syz [ 907.265370][T13185] usb 6-1: Manufacturer: syz [ 907.265387][T13185] usb 6-1: SerialNumber: syz [ 907.273948][T13185] usb 6-1: config 0 descriptor?? [ 907.553115][ T4910] Bluetooth: hci3: command tx timeout [ 907.614223][T17812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.624794][T17812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.659891][T17812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.660577][T17812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.979346][T13185] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 907.979390][T13185] uvcvideo 6-1:0.64: No valid video chain found. [ 908.019944][T13185] usb 6-1: USB disconnect, device number 96 [ 908.727822][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 908.918840][T17804] xfrm0 speed is unknown, defaulting to 1000 [ 909.549768][T17845] netlink: 'syz.5.2967': attribute type 7 has an invalid length. [ 909.629576][ T4910] Bluetooth: hci3: command tx timeout [ 910.280472][T15162] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 910.493357][T15162] usb 6-1: Using ep0 maxpacket: 32 [ 910.534461][T15162] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 910.534496][T15162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.534519][T15162] usb 6-1: Product: syz [ 910.534535][T15162] usb 6-1: Manufacturer: syz [ 910.534551][T15162] usb 6-1: SerialNumber: syz [ 910.999858][T15162] usb_ehset_test 6-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 910.999930][ T6129] hsr_slave_0: left promiscuous mode [ 911.088157][T15162] usb 6-1: USB disconnect, device number 97 [ 911.122231][ T6129] hsr_slave_1: left promiscuous mode [ 911.152846][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.152878][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.191893][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.191923][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.332015][ T6129] veth1_macvtap: left promiscuous mode [ 911.335849][ T6129] veth0_macvtap: left promiscuous mode [ 911.336109][ T6129] veth1_vlan: left promiscuous mode [ 911.336261][ T6129] veth0_vlan: left promiscuous mode [ 911.418142][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2971'. [ 911.713065][ T4910] Bluetooth: hci3: command tx timeout [ 913.041148][T17895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.048567][T17895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.384416][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.384886][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.385203][T17804] bridge_slave_0: entered allmulticast mode [ 913.421200][T17804] bridge_slave_0: entered promiscuous mode [ 913.527750][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.528105][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.528401][T17804] bridge_slave_1: entered allmulticast mode [ 913.571032][T17804] bridge_slave_1: entered promiscuous mode [ 913.629705][ T198] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 913.794709][ T4910] Bluetooth: hci3: command tx timeout [ 913.833944][ T198] usb 6-1: Using ep0 maxpacket: 32 [ 913.836556][ T198] usb 6-1: unable to get BOS descriptor or descriptor too short [ 913.845693][ T198] usb 6-1: config index 0 descriptor too short (expected 105, got 39) [ 913.845777][ T198] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 913.845838][ T198] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.975931][ T198] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 913.975967][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.975990][ T198] usb 6-1: Product: syz [ 913.976007][ T198] usb 6-1: Manufacturer: syz [ 913.976023][ T198] usb 6-1: SerialNumber: syz [ 914.269407][T17732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 914.305637][ T198] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 914.340018][T17732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.380545][T17804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.392683][T17732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 914.512649][ T198] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 914.521311][ T198] usb 6-1: USB disconnect, device number 98 [ 914.588593][T17732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.665835][T14520] udevd[14520]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.720359][T17804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.969083][T17732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 915.077940][T17732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.141879][T17732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 915.185754][T17732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.297253][T17804] team0: Port device team_slave_0 added [ 915.327651][T17804] team0: Port device team_slave_1 added [ 915.420552][T17804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.420572][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.420603][T17804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.515393][T17804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.515412][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.515442][T17804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.102539][T17804] hsr_slave_0: entered promiscuous mode [ 916.107493][T17804] hsr_slave_1: entered promiscuous mode [ 916.126415][T17804] debugfs: 'hsr0' already exists in 'hsr' [ 916.126443][T17804] Cannot create hsr debugfs directory [ 916.615540][T17957] fuse: Bad value for 'group_id' [ 916.615568][T17957] fuse: Bad value for 'group_id' [ 916.828695][T17732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.768210][T17732] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.878577][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.878799][T12233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.928416][T13429] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.928540][T13429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.531921][T18018] usb usb9: usbfs: process 18018 (syz.0.2991) did not claim interface 30 before use [ 920.935468][T17732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.223757][T18058] netlink: 'syz.5.2994': attribute type 25 has an invalid length. [ 921.462858][ T93] kworker/u8:5 (93) used greatest stack depth: 14336 bytes left [ 922.522786][T18082] netlink: 'syz.5.2998': attribute type 10 has an invalid length. [ 922.522807][T18082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2998'. [ 922.525176][T18082] team_slave_1: entered promiscuous mode [ 922.525202][T18082] team_slave_1: entered allmulticast mode [ 922.652393][T18082] team0: Port device team_slave_1 removed [ 922.655124][T18082] bridge0: port 3(team_slave_1) entered blocking state [ 922.655496][T18082] bridge0: port 3(team_slave_1) entered disabled state [ 922.724691][T17804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 922.803035][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.850912][T17804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 922.886558][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.918188][T17804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 923.087845][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 923.123155][T17804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 923.234730][ T49] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 923.237018][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 923.442043][ T49] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 923.442079][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.442102][ T49] usb 6-1: Product: syz [ 923.442119][ T49] usb 6-1: Manufacturer: syz [ 923.442135][ T49] usb 6-1: SerialNumber: syz [ 923.512444][ T49] usb 6-1: config 0 descriptor?? [ 923.581311][T17732] veth0_vlan: entered promiscuous mode [ 923.763948][ T49] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 923.916053][T17732] veth1_vlan: entered promiscuous mode [ 924.105371][T18111] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 924.247745][ T49] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 924.342799][ T49] usb 6-1: USB disconnect, device number 100 [ 924.628808][T18111] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 924.883827][T17732] veth0_macvtap: entered promiscuous mode [ 924.905585][T18111] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 924.989016][T17732] veth1_macvtap: entered promiscuous mode [ 925.007865][T18111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 925.008021][T18111] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 926.199695][ T4910] Bluetooth: hci7: command 0x0c1a tx timeout [ 926.407557][T17732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.461280][T18111] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 926.543894][T17804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.584927][T17732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.672883][T13757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.672941][T13757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.672982][T13757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.673021][T13757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.981066][T18150] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.069714][ T4910] Bluetooth: hci3: command 0x0c1a tx timeout [ 927.114264][T17804] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.119008][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.148926][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.375751][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.464177][T13429] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.464324][T13429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.501678][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.675871][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.752566][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.797944][T13424] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.798125][T13424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.827565][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 927.839693][T18148] netlink: 'syz.5.3004': attribute type 29 has an invalid length. [ 928.277244][ T4910] Bluetooth: hci7: command 0x0c1a tx timeout [ 928.363094][T15162] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 928.643623][T15162] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 928.643660][T15162] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.643689][T15162] usb 6-1: config 1 interface 0 has no altsetting 0 [ 929.122301][ T768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.122324][ T768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.165837][ T4910] Bluetooth: hci3: command 0x0c1a tx timeout [ 929.434952][T12231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.434984][T12231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.353392][ T4910] Bluetooth: hci7: command 0x0c1a tx timeout [ 931.139695][T15162] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.40 [ 931.139730][T15162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.238893][ T4910] Bluetooth: hci3: command 0x0c1a tx timeout [ 931.280038][T15162] usb 6-1: can't set config #1, error -71 [ 931.327109][T15162] usb 6-1: USB disconnect, device number 101 [ 931.662880][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.662995][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.982037][T17804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.189012][T17804] veth0_vlan: entered promiscuous mode [ 932.264361][T17804] veth1_vlan: entered promiscuous mode [ 932.275061][T18118] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 932.443288][T18118] usb 6-1: Using ep0 maxpacket: 32 [ 932.470756][T18118] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 932.470779][T18118] usb 6-1: config 0 has no interface number 0 [ 932.470812][T18118] usb 6-1: config 0 interface 12 has no altsetting 0 [ 932.477105][T18118] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 932.477142][T18118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.477158][T18118] usb 6-1: Product: syz [ 932.477168][T18118] usb 6-1: Manufacturer: syz [ 932.477180][T18118] usb 6-1: SerialNumber: syz [ 932.549905][T18118] usb 6-1: config 0 descriptor?? [ 932.575796][T17804] veth0_macvtap: entered promiscuous mode [ 932.695902][T17804] veth1_macvtap: entered promiscuous mode [ 932.924084][T17804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.025781][T17804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.137525][T13429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.153871][T13429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.192998][T13429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.193674][T13429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.444167][T18214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.444849][T18214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.744814][T18118] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 934.744869][T18118] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 934.744886][T18118] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 934.744963][T18118] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 935.099407][T18118] usb 6-1: USB disconnect, device number 102 [ 936.149298][T13755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.149321][T13755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.369344][T15162] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 936.373894][ T6131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.373915][ T6131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.471768][T18273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3021'. [ 936.524318][T15162] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 936.524371][T15162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.568239][T15162] usb 6-1: config 0 descriptor?? [ 936.605054][T15162] cp210x 6-1:0.0: cp210x converter detected [ 937.076583][T15162] usb 6-1: cp210x converter now attached to ttyUSB0 [ 937.198877][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.210102][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.278554][T15162] usb 6-1: USB disconnect, device number 103 [ 937.313148][T15162] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 937.529647][T15162] cp210x 6-1:0.0: device disconnected [ 937.552360][T18298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3025'. [ 937.590706][ T49] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 937.771134][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 937.780491][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 937.786843][ T49] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 937.787108][ T49] usb 4-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.836342][ T49] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 937.836383][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.836405][ T49] usb 4-1: Product: syz [ 937.836422][ T49] usb 4-1: Manufacturer: syz [ 937.836437][ T49] usb 4-1: SerialNumber: syz [ 938.314908][ T49] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 938.315407][ T49] snd-usb-audio 4-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 938.809523][ T49] usb 4-1: USB disconnect, device number 118 [ 938.859311][T15162] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 938.882657][T14520] udevd[14520]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.009369][T15162] usb 6-1: Using ep0 maxpacket: 8 [ 939.011423][T15162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.011455][T15162] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.013987][T15162] usb 6-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 939.014019][T15162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.014045][T15162] usb 6-1: Product: syz [ 939.014056][T15162] usb 6-1: Manufacturer: syz [ 939.014067][T15162] usb 6-1: SerialNumber: syz [ 939.502397][T15162] usb 6-1: USB disconnect, device number 104 [ 939.579196][T14520] udevd[14520]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.189308][ T49] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 940.253630][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.254251][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.255971][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.256625][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.339605][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 940.342910][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.343052][ T49] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 940.343083][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 940.343107][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.346058][ T49] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 940.346086][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.346109][ T49] usb 4-1: Product: syz [ 940.346126][ T49] usb 4-1: Manufacturer: syz [ 940.346136][ T49] usb 4-1: SerialNumber: syz [ 940.412914][ T49] usb 4-1: config 0 descriptor?? [ 940.466118][ T49] xbox_remote_probe: Unexpected endpoint_in [ 940.645785][ T5581] usb 4-1: USB disconnect, device number 119 [ 941.072590][T18361] IPv6: NLM_F_CREATE should be specified when creating new route [ 941.642471][ T5581] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 941.700943][T18374] netlink: 'syz.0.3045': attribute type 13 has an invalid length. [ 941.812960][ T5581] usb 4-1: not running at top speed; connect to a high speed hub [ 941.814929][ T5581] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 941.817636][ T5581] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 941.817666][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.817688][ T5581] usb 4-1: Product: 먱﹟밥ἲ甆啌앏⑻좖ﳭἦҺ鑈䙍믃싋⓪ᬛ쪴㫟諿뚣㺵힚罃꣪긞헀誯簕ᆏ僸✱༲律ࢅ嗖莗巉꫟ೖ䚍ủᨁ杋⥫翊悖攖稶笀ᐰ놪顕᧭ୈ梬뱗馷쵎㐮괊掃﹪䀏鉷韘봳쵌塙웼ᦠ䟭ࡋᮒꫀ曅簜鞙彿⅃丱 [ 941.817721][ T5581] usb 4-1: Manufacturer: ⠖べ섫骲䔖系ᵇ [ 941.817739][ T5581] usb 4-1: SerialNumber: ఊ [ 941.929020][T18370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 942.199032][ T5581] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input33 [ 942.225099][ T4946] bcm5974 4-1:1.0: could not read from device [ 942.303044][ T4946] bcm5974 4-1:1.0: could not read from device [ 942.307179][ T5581] usb 4-1: USB disconnect, device number 120 [ 942.779843][ T32] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 942.902579][T18399] binder: 18398:18399 ioctl c0306201 0 returned -14 [ 942.931922][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 942.935338][ T32] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.935378][ T32] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 942.935398][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 942.935418][ T32] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 942.935436][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.935452][ T32] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.935469][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 942.938221][ T32] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 942.938256][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.938271][ T32] usb 6-1: Product: syz [ 942.938282][ T32] usb 6-1: Manufacturer: syz [ 942.938293][ T32] usb 6-1: SerialNumber: syz [ 942.962720][ T32] usb 6-1: config 0 descriptor?? [ 942.971580][T18391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 943.074136][ T32] iuu_phoenix 6-1:0.0: iuu_phoenix converter detected [ 943.115817][T18400] binder: 18398:18400 ioctl 8010743f 200000000100 returned -22 [ 943.179651][ T32] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 943.237729][ T32] usb 6-1: USB disconnect, device number 105 [ 943.359754][ T32] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 943.361688][ T32] iuu_phoenix 6-1:0.0: device disconnected [ 944.123519][ T9] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 944.283934][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.283965][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.287667][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.287703][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.287718][ T9] usb 6-1: Product: syz [ 944.287729][ T9] usb 6-1: Manufacturer: syz [ 944.287741][ T9] usb 6-1: SerialNumber: syz [ 944.339325][ T5581] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 944.376521][ T9] usb 6-1: 0:2 : does not exist [ 944.376593][ T9] usb 6-1: unit 9 not found! [ 944.491363][ T5581] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 944.491398][ T5581] usb 4-1: config 0 has no interface number 0 [ 944.491477][ T5581] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 944.491498][ T5581] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 944.493381][ T5581] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 944.493403][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 944.493418][ T5581] usb 4-1: Manufacturer: syz [ 944.493473][ T5581] usb 4-1: SerialNumber: syz [ 944.564200][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.567334][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.586583][ T5581] usb 4-1: config 0 descriptor?? [ 944.595258][ T9] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 944.613353][ T9] usb 6-1: 4:0: cannot get min/max values for control 9 (id 4) [ 944.712996][ T9] usb 6-1: USB disconnect, device number 106 [ 944.852946][T18411] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 944.852972][T18411] overlayfs: failed to set xattr on upper [ 944.852979][T18411] overlayfs: ...falling back to redirect_dir=nofollow. [ 944.852987][T18411] overlayfs: ...falling back to index=off. [ 944.852994][T18411] overlayfs: ...falling back to uuid=null. [ 945.032598][T18412] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 945.401817][ T5581] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 945.413709][ T32] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 945.428606][ T5581] usb 4-1: USB disconnect, device number 121 [ 945.517910][T18418] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3060'. [ 945.594304][ T32] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 945.594346][ T32] usb 6-1: can't read configurations, error -71 [ 945.676442][T18422] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 946.469074][ T5581] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 946.720928][ T5581] usb 4-1: Using ep0 maxpacket: 16 [ 946.723666][ T5581] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 946.723700][ T5581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 946.723729][ T5581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 946.726861][ T5581] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 946.726897][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.726922][ T5581] usb 4-1: Product: syz [ 946.726941][ T5581] usb 4-1: Manufacturer: syz [ 946.726958][ T5581] usb 4-1: SerialNumber: syz [ 946.826340][ T5581] usb 4-1: config 0 descriptor?? [ 946.850568][ T5581] pegasus_notetaker 4-1:0.0: packet size is too small (0) [ 946.850721][ T5581] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 947.096541][ T9] usb 4-1: USB disconnect, device number 122 [ 947.481449][T18447] kvm: emulating exchange as write [ 947.499214][T18447] overlayfs: missing 'lowerdir' [ 947.538775][T18447] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 947.715620][T18447] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 948.121421][T18454] EXT4-fs (nbd3): unable to read superblock [ 948.288748][T18454] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3071'. [ 949.020536][T18464] input: syz0 as /devices/virtual/input/input36 [ 949.164773][T18475] netlink: 'syz.0.3078': attribute type 75 has an invalid length. [ 949.225745][T18475] tmpfs: Unknown parameter 'smackfsdef' [ 949.565550][ T38] INFO: task syz.9.2544:16017 blocked for more than 143 seconds. [ 949.565579][ T38] Tainted: G L syzkaller #0 [ 949.565593][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 949.565605][ T38] task:syz.9.2544 state:D stack:27720 pid:16017 tgid:16013 ppid:12932 task_flags:0x400040 flags:0x00080002 [ 949.565605][ T38] task:syz.9.2544 state:D stack:27720 pid:16017 tgid:16013 ppid:12932 task_flags:0x400040 flags:0x00080002 [ 949.565680][ T38] Call Trace: [ 949.565689][ T38] [ 949.565704][ T38] __schedule+0x1709/0x5530 [ 949.565744][ T38] ? __lock_acquire+0x6df/0x2e40 [ 949.565792][ T38] ? __pfx___schedule+0x10/0x10 [ 949.565822][ T38] ? lock_acquire+0x115/0x350 [ 949.565876][ T38] ? schedule+0x90/0x2b0 [ 949.565915][ T38] schedule+0x164/0x2b0 [ 949.565951][ T38] cgroup_lock_and_drain_offline+0x51a/0x650 [ 949.566000][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 949.566037][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 949.566085][ T38] cgroup_kn_lock_live+0x120/0x230 [ 949.566120][ T38] cgroup_subtree_control_write+0x4b5/0x1080 [ 949.566167][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 949.566202][ T38] ? kernfs_root+0x1c/0x230 [ 949.566224][ T38] ? kernfs_root+0x1c/0x230 [ 949.566248][ T38] ? kernfs_root+0x1ea/0x230 [ 949.566273][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 949.566307][ T38] cgroup_file_write+0x331/0x8f0 [ 949.566345][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 949.566379][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 949.566404][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.566436][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 949.566465][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 949.566502][ T38] vfs_write+0x61e/0xbb0 [ 949.566551][ T38] ? __pfx_vfs_write+0x10/0x10 [ 949.566588][ T38] ? mutex_lock_nested+0x168/0x1d0 [ 949.566615][ T38] ? __fget_files+0x2a/0x420 [ 949.566648][ T38] ksys_write+0x156/0x270 [ 949.566677][ T38] ? __pfx_ksys_write+0x10/0x10 [ 949.566701][ T38] ? __pfx_kcov_ioctl+0x10/0x10 [ 949.566745][ T38] do_syscall_64+0x17b/0x530 [ 949.566767][ T38] ? irqentry_exit+0x10f/0x8f0 [ 949.566788][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.566811][ T38] ? clear_bhb_loop+0x40/0x90 [ 949.566839][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.566861][ T38] RIP: 0033:0x7f3ef390e019 [ 949.566914][ T38] RSP: 002b:00007f3ef1b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.566939][ T38] RAX: ffffffffffffffda RBX: 00007f3ef3b96090 RCX: 00007f3ef390e019 [ 949.566957][ T38] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 949.566971][ T38] RBP: 00007f3ef39a500c R08: 0000000000000000 R09: 0000000000000000 [ 949.566986][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.567000][ T38] R13: 00007f3ef3b96128 R14: 00007f3ef3b96090 R15: 00007ffd83587c48 [ 949.567035][ T38] [ 949.567094][ T38] [ 949.567094][ T38] Showing all locks held in the system: [ 949.567108][ T38] locks held by kworker/1:0/32: 2, on CPU#1: [ 949.567125][ T38] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 949.567182][ T38] #1: ffffc90000a6fc60 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 949.567236][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 949.567252][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 949.567328][ T38] locks held by udevd/4961: 1, last CPU#1: [ 949.567344][ T38] #0: ffffffff8eb36f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 949.567405][ T38] locks held by getty/5344: 2, on CPU#1: [ 949.567421][ T38] #0: ffff888036a540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 949.567485][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 949.567552][ T38] locks held by kworker/u8:58/13763: 2, on CPU#1: [ 949.567569][ T38] #0: ffff8880203c9938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 949.567621][ T38] #1: ffffc90004cf7c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 949.567675][ T38] locks held by syz.9.2544/16017: 3, on CPU#1: [ 949.567690][ T38] #0: ffff88802d800b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 949.567742][ T38] #1: ffff8880365cc510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 949.567801][ T38] #2: ffff88806ee0d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 949.567864][ T38] locks held by syz-executor/17804: 3, last CPU#1: [ 949.567888][ T38] #0: ffffffff8e497010 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 949.567940][ T38] #1: ffff88801ae92cb0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d30 [ 949.568000][ T38] #2: ffff8880380611b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d30 [ 949.568067][ T38] locks held by syz.0.3080/18483: 4, last CPU#0: [ 949.568083][ T38] #0: ffff88803434acb0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 949.568143][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 949.568201][ T38] #2: ffff8880764da4d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 949.568265][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 949.568323][ T38] [ 949.568329][ T38] ============================================= [ 949.568329][ T38] [ 949.568349][ T38] NMI backtrace for cpu 0 [ 949.568367][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 949.568396][ T38] Tainted: [L]=SOFTLOCKUP [ 949.568404][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.568418][ T38] Call Trace: [ 949.568427][ T38] [ 949.568435][ T38] dump_stack_lvl+0xe8/0x150 [ 949.568464][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 949.568495][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 949.568527][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 949.568560][ T38] sys_info+0x135/0x170 [ 949.568586][ T38] watchdog+0xfd7/0x1030 [ 949.568628][ T38] ? watchdog+0x1c7/0x1030 [ 949.568685][ T38] kthread+0x388/0x470 [ 949.568715][ T38] ? __pfx_watchdog+0x10/0x10 [ 949.568747][ T38] ? __pfx_kthread+0x10/0x10 [ 949.568779][ T38] ret_from_fork+0x514/0xb70 [ 949.568813][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 949.568846][ T38] ? __switch_to+0xc89/0x1420 [ 949.568885][ T38] ? __pfx_kthread+0x10/0x10 [ 949.568918][ T38] ret_from_fork_asm+0x1a/0x30 [ 949.568967][ T38] [ 949.568977][ T38] Sending NMI from CPU 0 to CPUs 1: [ 949.569011][ C1] NMI backtrace for cpu 1 [ 949.569034][ C1] CPU: 1 UID: 0 PID: 4961 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 949.569061][ C1] Tainted: [L]=SOFTLOCKUP [ 949.569068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.569079][ C1] RIP: 0010:__lock_acquire+0x3e2/0x2e40 [ 949.569116][ C1] Code: c7 c6 7a 89 aa 8d 67 48 0f b9 3a 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 49 8b 46 20 25 ff 1f 00 00 48 0f a3 05 ce 90 27 12 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 90 94 69 93 84 db 75 4e e9 24 [ 949.569134][ C1] RSP: 0018:ffffc900043ff5f8 EFLAGS: 00000003 [ 949.569152][ C1] RAX: 00000000000000bf RBX: 0000000000000004 RCX: 00000000000000bf [ 949.569164][ C1] RDX: 0000000000050000 RSI: 0000000000000000 RDI: ffff888038c88000 [ 949.569177][ C1] RBP: 0000000000000000 R08: 3900000000000000 R09: 0000000000000000 [ 949.569190][ C1] R10: 0000000000000000 R11: ffff88801aeaf238 R12: 00000000000000bf [ 949.569202][ C1] R13: ffff888038c88c18 R14: ffff888038c88c18 R15: 0000000000000000 [ 949.569216][ C1] FS: 00007fb14bf59880(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 949.569232][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.569245][ C1] CR2: 00007f2371a856c8 CR3: 00000000388c8000 CR4: 00000000003526f0 [ 949.569262][ C1] Call Trace: [ 949.569269][ C1] [ 949.569281][ C1] ? __lock_acquire+0x6df/0x2e40 [ 949.569299][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.569317][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 949.569337][ C1] lock_acquire+0x115/0x350 [ 949.569371][ C1] ? kernfs_dop_revalidate+0x9e/0x650 [ 949.569418][ C1] down_read+0x97/0x200 [ 949.569437][ C1] ? kernfs_dop_revalidate+0x9e/0x650 [ 949.569459][ C1] ? __pfx_down_read+0x10/0x10 [ 949.569478][ C1] ? kernfs_root+0x1c/0x230 [ 949.569497][ C1] ? kernfs_root+0x1c/0x230 [ 949.569514][ C1] ? kernfs_root+0x1c/0x230 [ 949.569535][ C1] kernfs_dop_revalidate+0x9e/0x650 [ 949.569560][ C1] lookup_fast+0x25d/0x5d0 [ 949.569581][ C1] ? inode_permission+0x2bc/0x5f0 [ 949.569601][ C1] link_path_walk+0x71f/0x1910 [ 949.569629][ C1] path_openat+0x23c/0x3850 [ 949.569655][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 949.569685][ C1] ? do_sys_openat2+0xcc/0x200 [ 949.569713][ C1] ? __x64_sys_openat+0x138/0x170 [ 949.569742][ C1] ? do_syscall_64+0x17b/0x530 [ 949.569770][ C1] do_file_open+0x23e/0x4a0 [ 949.569791][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.569811][ C1] ? __pfx_do_file_open+0x10/0x10 [ 949.569845][ C1] ? alloc_fd+0x654/0x6d0 [ 949.569866][ C1] do_sys_openat2+0x115/0x200 [ 949.569899][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 949.569935][ C1] __x64_sys_openat+0x138/0x170 [ 949.569967][ C1] do_syscall_64+0x17b/0x530 [ 949.569985][ C1] ? irqentry_exit+0x10f/0x8f0 [ 949.570002][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.570021][ C1] ? clear_bhb_loop+0x40/0x90 [ 949.570043][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.570061][ C1] RIP: 0033:0x7fb14c0b5c3a [ 949.570077][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 949.570093][ C1] RSP: 002b:00007fff3e829868 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 949.570112][ C1] RAX: ffffffffffffffda RBX: 000055a0a73f8960 RCX: 00007fb14c0b5c3a [ 949.570126][ C1] RDX: 0000000000090800 RSI: 000055a0a7378970 RDI: 00000000ffffff9c [ 949.570139][ C1] RBP: 000055a0a7378970 R08: 0000000000000000 R09: 0000000000000001 [ 949.570151][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055a0a73787b0 [ 949.570163][ C1] R13: 00000000000000ff R14: 000055a071f4dbe0 R15: 00007fff3e829af0 [ 949.570185][ C1] [ 949.608400][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 949.608427][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 949.608458][ T38] Tainted: [L]=SOFTLOCKUP [ 949.608467][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.608481][ T38] Call Trace: [ 949.608491][ T38] [ 949.608501][ T38] vpanic+0x56c/0xa60 [ 949.608528][ T38] ? __pfx___schedule+0x10/0x10 [ 949.608564][ T38] ? __pfx_vpanic+0x10/0x10 [ 949.608595][ T38] panic+0xc5/0xd0 [ 949.608616][ T38] ? __pfx_panic+0x10/0x10 [ 949.608636][ T38] ? preempt_schedule_common+0x82/0xd0 [ 949.608672][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 949.608695][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 949.608729][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 949.608763][ T38] watchdog+0x1030/0x1030 [ 949.608804][ T38] ? watchdog+0x1c7/0x1030 [ 949.608844][ T38] kthread+0x388/0x470 [ 949.608881][ T38] ? __pfx_watchdog+0x10/0x10 [ 949.608912][ T38] ? __pfx_kthread+0x10/0x10 [ 949.608942][ T38] ret_from_fork+0x514/0xb70 [ 949.608975][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 949.609005][ T38] ? __switch_to+0xc89/0x1420 [ 949.609034][ T38] ? __pfx_kthread+0x10/0x10 [ 949.609082][ T38] ret_from_fork_asm+0x1a/0x30 [ 949.609131][ T38] [ 949.609794][ T38] Kernel Offset: disabled