last executing test programs: 19m29.342122626s ago: executing program 32 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000120000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) 16m55.787906127s ago: executing program 33 (id=3505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000400000001b0a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002"], 0xb0}}, 0x0) 7m7.932050932s ago: executing program 2 (id=8548): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x119, 0x8, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000141a02, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x13) write$binfmt_aout(r5, 0x0, 0xffffffdb) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) 7m6.799931179s ago: executing program 2 (id=8557): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f00000053c0)='./bus\x00', 0x364) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000280)="c11c611d733334890d586923f8251e55aeb5830b243a7bd69cd83bfb8cc09e031512649d0c44919ee1ab762cb43a699b9e2a165b25764ae3b5", &(0x7f0000000300)="07cd8c9211ab3c7ddf71ca0bbde1ae04517e1d85764b88841d59a58436dcb06bab026734d5e6409a04902fcef90f5d49c13679cd7661fc51d526bcc7f81de299d00e9e7e5d"}}, &(0x7f0000000440)=0x0) timer_settime(r2, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0xfffe, @none, 0x1, 0x2}, 0xe) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) epoll_create1(0x0) read(r0, &(0x7f0000000080)=""/134, 0x86) 7m6.60806633s ago: executing program 2 (id=8560): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) listen(r0, 0x5) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfffb, @none, 0x3, 0x1}, 0xe) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 6m51.179359762s ago: executing program 34 (id=8560): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) listen(r0, 0x5) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfffb, @none, 0x3, 0x1}, 0xe) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 6m51.121578896s ago: executing program 35 (id=8564): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x24040802) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001a002902000000005600000002000000b33acf214c6fd635748db41fe3b03c2bd58b821d78cd4cfa60031936b0c3295891342dcb304a89d9bf99c7625eb30e3d83f7dbf7e27aec01e8c2de1a79f538a2539207e744aadf91b35c9b49fbd440923ca6625e492e923de8dbce6e8f2cd199adf4328ea833f77e3970f2cc34acb0dbc47269939e9ffcf2132b0790217a367e5c46463f472b46289f52864db9b50452207fbd0da2794dde1cf640"], 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f00000004c0)) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000), 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0x0, 0x3, 0x7, 0x4, 0x7}]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x2e, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40801) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x62, 0xc0, 0x3a6, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x700, 0x8, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip_vti0\x00', r9, 0x700, 0x7, 0x3, 0x92, {{0x15, 0x4, 0x2, 0x3a, 0x54, 0x66, 0x0, 0xf8, 0x2f, 0x0, @empty, @remote, {[@noop, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0xa, [{@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}]}, @generic={0x44, 0x8, "93a504000000"}, @lsrr={0x83, 0x7, 0xbe, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x51, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @private=0xa010101, @multicast2, @multicast2]}]}}}}}) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 6m43.273539454s ago: executing program 36 (id=8618): r0 = socket$caif_stream(0x25, 0x1, 0x4) io_setup(0x5, &(0x7f0000000180)=0x0) connect$caif(r0, &(0x7f0000000080)=@util={0x25, "bf727e1fd0116dbae29f9a6f9730d8b6"}, 0x18) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f00000001c0), 0x0, 0x9, 0x0, 0x2}]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 6m5.617032191s ago: executing program 37 (id=8841): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, 0x0}) r3 = dup(r1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf9b"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, r5, {0x9}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r7 = accept4$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10, 0x0) syz_usb_control_io(r6, &(0x7f0000001540)={0x2c, &(0x7f00000013c0)={0x40, 0x30, 0x19, {0x19, 0x4, "291b9caf01d7645a43ddb3f84bdee68c518c585d0f2133"}}, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000001440)={0x0, 0xf, 0x5f, {0x5, 0xf, 0x5f, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xa34, 0xf0f, 0xfffa, [0xc000, 0xf, 0xff0000, 0xff00c0, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x9, 0x0, 0x9f}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x6, 0x0, 0x2, [0xffff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d77d7b8aedddba5793f30bc8f3a81777"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x9, 0x3}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x7, 0x8, "8e7b68ab", "5cab9d8b"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc8, 0x7, 0x5a, 0x6, 0xa9, 0x7, 0x400}}}, &(0x7f0000001a80)={0x84, &(0x7f0000001600)={0x0, 0x7, 0xf5, "c10bb416ea73f8c05d78786d111d0ba8e1ff31615f7e34c8db0af0413a3ec81599d569e752dba5399093e9be6eb83b593bb2c740238616c1d8dec6d5f55b8606e83d0ca61a82b216ae030cfe7bc91ce09921c0e93c3645bd52517d998910fa0a2b0b06a29b1719c40a547023b2f244f7432e0dfe31f1856f43aeae325c6a1c72e10cd78113797f8695d76e4d8774061494732eff8bc6fe3141feff174f29f537da9c1819fb7678c777564e0cb530c9c4687ccdc2b77ebbc531dcc2206919f2c7eab34505c3b3462838974ad3ccbf041c50007cfed4d1cb6740ded6135675f1795b1c0a7c53e3e460b6cc020c680d02577749481e14"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x1000, 0x40}}, &(0x7f00000017c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001800)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000001840)={0x40, 0xb, 0x2, "c454"}, &(0x7f0000001880)={0x40, 0xf, 0x2, 0xff}, &(0x7f00000018c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001900)={0x40, 0x17, 0x6}, &(0x7f0000001940)={0x40, 0x19, 0x2, '\nL'}, &(0x7f0000001980)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000019c0)={0x40, 0x1c, 0x1, 0xd4}, &(0x7f0000001a00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001a40)={0x40, 0x21, 0x1, 0x7f}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"57c8b4b2dc2c85b3a5b85ab30eb84e59", 0x0, 0x0, {0x5, 0x1}, {0x3, 0x4}, 0x5, [0x9, 0x7, 0x6, 0x43c55e7f, 0x7, 0x8, 0x80000001, 0x21c076a2, 0xc1, 0x10000, 0xc, 0xffffffff, 0x81, 0x38d0261, 0x3, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000003c0)={{r7}, r8, 0xa, @unused=[0x3ff, 0x5, 0x9, 0x10000], @name="a5742eda2937079d5700e07f68a37969d8834f3c0b02618222a3ec4252f2562546b3f0804dff6b8b41ddb98e2cb595e18bd9c5311e01cb337ef05018f7212c2b0a6d2a80cc85eb846a163b8b0a1a3aacbb5484cd52442a1820848426661c739838dea14d8a7a64635f496c0db87accdef0221e051ab7f6e2737fe02ec91dc2369abc79ef3c8bce9aa6fea32695f359d0eb582f3335c7f0af4cf01631d3a834cee965cf2cf78cde4b08eb2077b77e11dd2964c885dde1deb5ed52e1d9ff1bcf7f107ac33beb4870235e3317b887cdb437d148089e9a4233dbe9edf96554e829407eaff614cdad6bbcabfe52aa97387c152efff8b59f88af09ee4bf14cd826c9624e801adcc7b9fcb35d3e22f683116fe2498a9e526f4dbd7166ec8e71ac9dc9eef81847de2ccef1f166a40ed3a722b0b35a0643db5bd8cfef58c00d458f58fb6b0243977de1abe9d0a278ca821127fdbc05b41391a4e816d8fea070a769fa604122bdc5adce0d187561c516deafa0d9881c038469776c2d5b328ca8e19550e6d25946761150e0ba77dd1b91a97c001dabfc98b1fb28a882f9861fb67df3dc377485444486fbea7accdcd1a3bce92e5b438638bf4e1d3b33b3bd2330946f1eb45c4e4d6dcb1896e2f3c4497b01966ecb89b9defacb3711f93999278b73064f5f6bd003f6feecddc85365cb7e675f14a8fd16ffe23d99a56cb501041e46269924b862795ccb00e9fbffd83c3a9262f862f7e4a5a580c53ce3231573085ecf69a22fd01c3ce7becba0a427387b9000b93710691404245c003bd4f0e6eb9224b86108f81874c7371fd99750c8c7e4a3940fac17cbcfd3f198f383c0d329ea1ff293a231338f3dc8ac856dd9de20d94be26439c572fad1af30903a194d0869d005c61f3c0c84d169e3f86e39eb1ad4972a3272ab1e7795131c1439672d3488caa92b281827197e81142cec0fc2abc0972d88f3c9091296cb26029b5160f709d85cc69421288649c9829f93fc2a31e80e3cfda57e6c5287820e795572a577451f58a5654632cd375605ab9f383c4d21675f204bc3ff372cc6dc8d15447cfc510f94e39163e62cdac978f175a1217cd5c437764d1d2bff39addf9ee952b91539ad32777271a8e191c9365f42572d2c902c83a17378d9bad72af1a68a92219dd07929fab6bf6029d1d2c7bce6d2439183caa0cd9008f0cd1450e628c8e342149f0a6df65d2d32a8968ced4b51c1e3c9adfb8fd5dc2dcf86fe8a861dec5a6750cd7614d15c510c5127a0a121f6de2721af8b80b9202680e8dfaa38d3512e4631aa2c929635b5439c5840fcecb7b132b045b0c76530dc2cb8bd6697ed2b8d806914bbf86fabb18fb7e1a4e39b6460673ea7aab1e5e297a691fdb6f6ded11fa50bc739f50e56ebf57ea3683c865671044ef4453d04a1fef72ef6dfd8fe32bfeeb941fd9ed4a5900785331640a969e7e739e57f6bd869ca22344a15fd2cae99d1b6ebf47993c59b8af617d08fd26332cebaaca878bc31516c7318a2c270f969e2a132e08bef71776fd8a7b4f2450b551088fde4212711b6a29dc3773e7dbdebf089b71cef59300a64bccefd4ce600041ed476986c64db02d3b26dd2701061c5c94198169dbea6f96ab744c92b2b4425d5f85087ad253a715631ad27db7511ddcaba4567ed89b1389a4720fe83d02419f52ad53e3b3fae0085178df0347fad8adb1cd038436a97646b6a8169ec04c609ae59b5f71f31341dab606711341eb5b269d10fac70d122ef1b78fae0af6417bd3a7aa2f26c67ba75638a92c07d75ee84a58d189d71651dc81775af0b0cc50ef46aae516f85919eafa29e515919dbfac9def1114246fff991506cfdccb59129d8cbbac527f11e1231ee12792649e44508aa13da054dde02641fa3ca1d4e62a835b703089100d7b370ae9b9f8441078a8851629891c8b38bf8e27c673c68b41edf67c64eef933d765c099d69ad9c3539b91a5882a910dfd683e3647ca332b2678ef15a6d1cb711377fb441e1356fb5bd66c3a6717a8164e49a9b280375e4c248556e4d85e6357d91a206af9707274cb4662d95354235996ce0a91ba47b3c8540905489185f0d209767ea6af40886d85e2d5a7bd0cac87b83416fd30008322bfdddd3185d8f6590f7a2d8fb2233b400925deee4a73589a11dfe11bccb8eac34272034eb3de003a1424a81d4dc46f837528e5e7f6a49de30422d67834235f57d3c6208859bc32829969f234e23f4ab87b1cee492f3ba36470a08b0917bb6ac9f5649569f591709efdcf9921683a31c802197eef800a666a667bbf6e2b1e02eabee71c137e20469317dad2c2c926568174def9653bac88358d80153216df980ff680774c600fb65413143f7fc063f132b1c4a2f233af90c2989a6585bf6d47b7b0aceefc08b92a1921a86385e9f42f3a1ad38de266a753f6588f55fd5ade3ee2851d23ba42da2a7109c3f9316ee148b9d4a0ad2ed9fb61eb319011f2e331f33cbfd3426aa027eef02edd9721dfbdc7e4409c897197f4a1917c892e9f9faa604d8198888c423e37438a2a2159fadff0d59be033c0523804b9a05aeb4033dc84bbe4101e81476897b124eee8dce957753aa2fa53417320b954a19b2181e2fd258c345eb4887845f21f1bd6e924251f82c9a24fbd66e3cca7c27b8f46f42218f682b758c464067863704560959473bcabb2974cd63d37a280363c3ce192af947f691f018aa5b7bace7968ac713cc47b7dec507131b4ecb4ed967a551e7c21a54a1bc60d34d38b53ad0bf993841f7e038dc05045c30885253452c8afc039f9a08f6118115ff2d16fdb2b5c19193c983491827e26b2abd4d3d817e947fa310ba20c7f32c3c653f0a57c75632cd430163a3d5f131c0db972484e2d39d88017592df9ec69a78161dffb4c8aabacf42800021f2b83e471dbd06597ce1184bbdb91ae9844eea138c556430a0e202ef18a80cc4a1aaec9b7cb8de3e05fe54bec18ed7c8a3518703bd91a7989c8cecf1ad3a52e3d2eb2034d0f0bc0e013eefce2a5dd1fe2c53bb58e6134f3f6cbe713ac84b881ac6bbbad40bb08a45b67931bd8d9c7c3048f88b7c53ff96a2519a03e71c3c1ea5cfa760d5aa9d15b2f4f19e3a588e83f457340f5eb27466d53eb66038676a6637d5c3534fcb4ede1ce0387a8f1af3d70ee3cb77c594128cbc84c3dab7299504022043011769baf599568bb715b301c20349812e57322bb8b37fb3c18c7caa4fce4be33e5c5f9f39168051fc8b2839d5df1edfbf2181662ac617fc5ad5e6a1b886814bff789e80923e1a50a019a4ef63ee4a438a7aec4b5fae6a1820ac62abcea686cf59bc012c0b83e3bae4211d4bc73f8f9edf13457f36cd41f2d7c6dbbc6a550cac191f1c3ddcc0b0651fd5eba8e056bbeb73a9f8f4d33146a3e0056dd75cde58eb57f85e0a949ada726c253e0613d4d807bca2e8823a05580567bf8b2314d0db789ec093860b2bec6b4c1b054c0f77681493a85c2ffd37a3b160307daa87af8f7b30e5cdee3fe3fcf6abcf7a89f9cf624a4f998f33d416203642d4d755bd93375799db980e3a8f1f4892f4e223ddfb94115cab72e466dc2fe052cae1fbb8a0c9519449a6fd79921a2504a84e96fef18aacb68c9415d90ad619893e820971b1e4233cefa9d3b970f3a2f95d7581a9ae970260fea6b47e45f4dce233e228397c162caeb4373989e12cfe98c4bc1ccc9599b30bbefc0b83d3d91687272281ee9c31c15fbaab6a0418a1de7bd93c6e9c091ca724303d1bf2a46a6b346155ebcad20efa339166fe4d4f125fef9ebf88c0e12d42ffe34dc33a357ddc6185cd4acab47ec5a3395bc6c13f04adc3294e62ebb722627b5c513a1fa7b8d85dfa55572fe16289486398193eff7593808a8e4ea9b3034ad417f91c2eaba16e31731b03a3c08a1c1e5b4a19798b8f52f4cf705486058cc3d4edda2fb18c2a232faf3101c8aca2f4e6074987975acecd1bab5964ef10d5d8af46be0cd3b8497b5d6c13b4cdd4b5ddfb82da7231ba4250a9a3315a17547d5ce8d002358f3e34cd5a23f37a84caf29919cab89b4ed5d1abf19534a52b83fd4483e0e0f0ec0894ed8b146e0cea1878d80f6b5d35220424d6a1b061f7600d7cf0e2e120d5311b15fbb4617af4f41d541b1fc3b1cf5a0cf50a84d950b9da141699741fdcc5adb867320b514a8d2e47b187ff000f58461eef61fd7fd0958a59535dd8e8b991930232dc739fe6b8b8f8643c8298992efbd00dd7ae48a235aeebcdd63240586c4a84a35699ee61eb2d019f5a4232218eb7081d0e936f7a2ed77cc747bf07de841fd291f7117ff28524617d2a836873e65b9df8773e35fb407830c0359d433647be3b0c2efe9856e0147f8b05be7d35fdefd0aff44bd8f50c832f1e05778bb5af8852f1842580f8efed4eac163781df3dc5af86c6c23c46d07518db4e458bae1f787eb52476d390ed45f5d4918e29de5982072d9996d9ab6dfd74c42f64a380373ff81ead1524b9d2a94531b9e08bb4d94624be0f5929e324a38c1fb51ac5782f154fe9d83e67018a35f041c44eac5965a7d9b700f7c76e1622c8fabc46fb0b932b203477891f01bf32bb1ab3178453bdaa35e1adb5b00d82c2d59f896cbfb48cd2653b423803336d08bde50067983fa6bb5ce392f5587622cd5b449e3e90f55bc334e47f9461ba44e356416a811acd9fc3237f55215fe2de3c47c4f986d5a3938e14765571948d2b21dbb90999365c754634cf8cb98de7ff9417ca601cb89a63a8913ee06866dc98cc0e4c3d61c1a42f3b18a4e55496d47ff57911800311b190c9f0d2b675f33e0f7d180dc1558e13457a464cd0d0d03880fe1bcd84d84d36b212cc828b05a98e7841b352c0b13e16b2f28249c850477ed02727a11a8ae2c144187af218324ca468ee9525397fd361c704e7fada6e730c2d0d3335c4a52e9c466e3bc6421465d4582e9ba00a27a4312d984ff6d628ea1762cdafacfc94385984d9c030960f30a4029f16f1be4c1d8f0e98c870c01b89bd0e811e565a1f445eec5e238feee43fe5a46a7ee2439e4de83c79b396e2ff64f6459e36b31a533aac61a2f5fff3f407189bd6a183479120039e639beb249d14ca3b16eeb1eb4af2a2a7f9e98b687a1a78150134720d933d46516cc6a0d150e294b31494560c443f45c401cd10b665471bf9e073a495e877f80d2ec16711ec7133b6403e4eaa048cd5d28186754a6926b14c0089208b020d4a2583c1c0cd63fab612a860b8ca4c67ee9f05e4066e4849366c1fd33dd89c691f87f39f41b455791d1980cae36ac52ef2d945ba0b71aeff615222e2c4c4ee84881f4d9cd45d1bbfd3d2cdf3ca04aea8db7026b7fd0cfae1bdc1a7fe688c884911a0a997cf8ac0f254488ebfcc0b84c54ca55d82a1ae271d13f2ffc2e3a50678a905c6152386b65256086d653a283faae1145cad2b200200242901b8eacb9ea7f8579684a3b4a3028ada70752aef0645acd6049edd2428d181d3f8fbee18848a985e04dc7c80c0f13d457046d2b09d88990a85514534320b26780a56ffd72712df09e78022321648255740a56c2a6a8c0b8621a416d8a6799c5592f947e8e061011c0750132ed751264564caea3d439c71f3b7c1a228333f938321f59e198bf1962ab8a9ca5a041dc82ce6315441ea4dfae977c655b7a893889a328e8c39f9d8746c20918bdb41e67f5f6def669d12"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 6m2.622316813s ago: executing program 38 (id=8850): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x7fffffff, 0xffb}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80440, 0x0) mmap(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x3000001, 0x4000010, r2, 0x6f38a000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x9001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x592f3389481e0f36, 0x8080000, 0x1000, &(0x7f00007c5000/0x1000)=nil}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000040)=0x371, 0x4) 5m58.479818188s ago: executing program 39 (id=8859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96", 0x8b}], 0x3, 0x0, 0x0, 0x40084}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)=""/10, 0xa}], 0x3, &(0x7f0000002480)=""/4096, 0x1000}, 0x6}], 0x1, 0x1, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) 4m11.206490655s ago: executing program 40 (id=9558): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x69) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x6, 0x9, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x4, 0xffff2d33, 0x8, 0x6, 0x7, 0x0, 0x80000001, 0xca, 0x7, 0x7, 0x3c5b, 0x6, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0x9, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x9a2, 0x6c9, 0x9, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x3, 0x9, 0x8, 0x9, 0xfffffffe, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0x0, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0x5, 0x7ffffffd, 0x9602, 0xa, 0x2, 0x4, 0xffffffff, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x3b, 0x4, 0x0, {0x10, 0x4, 0x1, 0x2, 0xd, 0x65, 0x9, 0x2, 0x2, 0x81, @private=0xa010100, @multicast2, {[@ssrr={0x89, 0x27, 0xd3, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local, @multicast1, @empty, @loopback, @rand_addr=0x64010100, @loopback]}, @lsrr={0x83, 0x3, 0x1e}]}}}}}, 0x6a) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 4m10.186886043s ago: executing program 41 (id=9568): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) sendfile(r0, r1, 0x0, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, &(0x7f0000000180)) 4m9.154832606s ago: executing program 42 (id=9577): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0xa, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="830772fe", 0x4}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b282, 0x0) write(r1, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) 4m6.076706867s ago: executing program 43 (id=9586): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x0, 0xf3, 0xbf, 0xf5}}]}}]}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x86, 0x49, 0x20, 0x7ca, 0xa868, 0x8a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe3, 0x0, 0x0, 0xa6, 0x63, 0x62}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x80300, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x81, 0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81", 0xa}], 0x1, 0x0, 0x0, 0x7400}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0xfc}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x1, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000440)='-tB{\x1aF\x8b%\xff99I#\xc0f\xd5\xfe\xf6\xeaEj\xe9\xe7y\x1b,\xa2\xe0v\xfa-AL1\xfdU\xf0,K\v\xc8\x93\xc9\xf0\xe42gt\x02\xfb\xfb\x9c\x18\xa4\xb2M*\x92\xa4\x9d%\xee_\xda\xc6^\a@*IO\xd1o\x11\xba\xd0D\xcfL\xc3`\xf7\x98\xc1\xaeUB\\\xa7\xec22#\xca6\xb0\x80\xd2?da\x9chc\xd1\xe1\x02\x96Za\x1ew|-.9\ftx]\x1f|z\\\xa4\xaf\xda\xb2\xae\x87\xee\\\xc0\x99i \xe7\xaaoz\x9a\xcdEN\x99\x88s\x16\x1av\xb6\xde\xd7\x8c\x96\x04\xe4\xb3d\bk\xe7\xd9\xf4\xa3\xcb,\xec\x8f\xd6Z\a\f\xb0m\xb1\xf1\x84\xef\xb0\xde\xad\xc8\xdc[\xbd83\x11\xf6B\x18g\xdfj\x95cE\xcb\xfbU\xec\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85\xbdvi4\xe4\xefa\xbdT)\x14\x8b\xc6\xdf.\xdb\xd1\x05\x1dM\xcc|~\xfd\xec\xb7\xdf\xfdU\xebX\x00.c\xb0n.P\x930p\xd0\xc7\xc9\x16\xb1\xcb\xda^\xc1\xc0e\xe1\x04\x178\x10l\xf9+$\x9fC\xbb\x12\xb9\xecq\vb\xa1\x06\xfd\xb9\xd8\x06\xe1\xdb\x87\xebR\x8e8Dkx\xa2\xbfR\x18\x05,\xfa?\x95\xe5\xa7LT\x9c\xeeV|\xe2~\xf9\a\xe5\xef\x90\xfa\xfb\xc8\v\xea\xecy\x93\x00\xc5\x01\xcc\xf6\xa4fu\r@\xa5\xc2=N\xc8\x9e_\x98\xceT \xe2rc.\xd4\xa8%\xa1<\xd4j\xb9\xc1\xff\x132\x8eu\x9dY\xa9R\xaf\x11\x1d{\x11\xc6\xa0q\x85bQ\xb4\xe5\x13\xfd\xf8\xdd|`\x10_\xaa\xbbC.al\xeb~\x99\x89i\xe6[\xc4\xff\x8fO\x94~\xcfY\xd4\x98\xe8{\xf93\x12l\xb1\xdfx\x06\rg\xaeZ\xf6\xc2X\xaba\xc7\xc1\xa19', 0x0, r4) 3m50.992829582s ago: executing program 2 (id=9587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc000000000000000000000000000000ff01000000000000000000000000000100000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) 3m50.775477212s ago: executing program 2 (id=9591): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m50.584967539s ago: executing program 2 (id=9592): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e00010000000000de6a99214e5868ba000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000003003c000000000000000a0002001c000400feff4e244e230000fc0100000000000000"], 0xbc}}, 0x0) 3m49.060102556s ago: executing program 4 (id=9593): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async, rerun: 64) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (rerun: 32) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x10, r2, 0x1, 0x9, 0x6, @local}, 0x14) (async) write(r0, &(0x7f0000000380)="fb196dec", 0x4) 3m48.938769029s ago: executing program 4 (id=9594): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000140)="5a5b0c28ecbc2ecae09d51c44d67", 0xe}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000300)="bae6e7a8dee93b0693ad80bd64c0c8ffe49dea854b13d7cc6419e856d0cbf0e66f98d5f29e9b98a2a4442ed443b2a4a207a15f84b7811df9c22cf880468b08e5a98919b0ed31ca6325265dced6877e0a5dc1cf40718c3c1dda25b4c613bd2cfcf1683388e5b14c9143b4eb826af0f0085dfcf100ba060901bab0628bd95ec828ce79da724a3c99c86e0d8d82ee56225816e17aa25c847abbffc479f77eca0a6fc0e61cefae3ae0b71471b49fc969f8d6a4210ac9f485", 0xb6}, {&(0x7f0000000440)="7f0b9a13a3b14cb490a85ab906e16ccb74f932d980d8037fd72a9ac9a8462ea49c555e30805656b905bfbd0f0196c5f07f85b3c7b4ed51c789c044268008655fa255859034b59245a03fbf77a582ecec4935ccc57af4078331d1002d662c67a26660f6756cc1422482b2d6dba5f94097b5e6ebfe8afb8d23dff8eafabf5b5e1ea1d155c0ef2272e6a70fc4de4fb0e5b99af4cc8d395efa32836e999664d3850962ecf880fc4546f60b4db82b9525ebb9e641ef02aed0804e45f122985fb1330b07429b8d5ddbc9f9db84312f1a41129b1ec42109b6def1b27c92", 0xda}, {&(0x7f0000000540)="2b4e5870d7323b68e1528a2a8cca7944666145e629c1e59d6be3c23fdabf8cc8caca2ba7a113ed328e7ce0a772f4a74a87d7c17ae0217ffba9ea57bbdf1bfa00e492166587864041fb688914aaf7a62fab4d7d97e075c31967d3fe88185e6766811c5a38462682445abffc80ccd3c32ac399de3cefe9e060939ba83aa85e1219669a975c5b9f48fd27ad27d7bd5cd3d8056f0742392c1330d955e8b79231f12df9431e4b10a9104a32a142a4eebd90bc23a709efb51789bb3d8fb7ea1913b83df2160ef8078681eeef19e01a2c4d82d26b6632891f51b949fb2ae4e19099cc03628904a13d12baf294401924388fbd30015677", 0xf3}, {&(0x7f0000000640)="4d3100e26a585f3bb34c14043e939f0aac129c877bcc2d7fd5fc575174b63faeb9b9723f14596afe57b6624087f9ad3c7e12995c4bf6c8bf71d8590d7e172a0b03de3aec78d1a72cfbb04b42872406ba8047247864312d295793c852a0a4e776dc629a124904b7077b20eaab12f68e5e40ce8827b91b78c698471d958e0fd80f907b1affe0", 0x85}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="a8000000000000000301000008000000ad482c51956164f485312d202000a684517186051a06aa0c5ca06aad6a87935aa874a13388f3eac3a3fed75efd1cfa2a03e8143d9921834a5f74464c3e4d8230f6a991b83a29de5f43c4cd0076f5724bb11b59b3af390dcd938095be7a8c1fac96b76c3ec643f93eeb8d3b9cb680b81f110e334e198f20f7498f9c7570a3e68a791d3e8b6432cd9e32602c440b0ccf000000000000"], 0xa8}}, {{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d1860", 0x7}], 0x1, &(0x7f0000000cc0)=[{0xd8, 0x11, 0x8, "3ce3678abea73a1aa0242968907c31b34ea7d44703f483edbcd09c382cc02b5f13ec2a7d714744a20cd0891bec4016392905e80b6334cf8578cc238a777ed8149447609980de00868ce307eee777f063706ac9bbc40e5a41e53e7131f22ed2e6f257374502b237c39e65f5490e73ce45f03290ddf8202964bfa88fccad9d2537f8b00d3c5c20e1cec21a300498d9410e4861eb4566168494f64d4f8c4f02cd96418e82dbe628b5ba0af6b9a98f082d20c5745d8a2b3f5d91bc0f7d629362499b7a1d1725d7"}], 0xd8}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x1) 3m48.734629504s ago: executing program 4 (id=9595): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000002ec0)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x440d1) (async, rerun: 32) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) (rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x1, 0x10}) (async) r3 = syz_open_pts(r1, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffd50, &(0x7f0000000140)={&(0x7f0000000280)={0x44, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000088}, 0x40000) (async) r5 = dup3(r3, r1, 0x0) madvise(&(0x7f0000687000/0x2000)=nil, 0x2000, 0x65) (async, rerun: 32) read$FUSE(r5, &(0x7f0000000e00)={0x2020}, 0x2020) (async, rerun: 32) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 3m48.410559169s ago: executing program 4 (id=9597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x3c}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000), 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 3m48.000044699s ago: executing program 4 (id=9599): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 3m47.789303733s ago: executing program 4 (id=9600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x8054) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001840), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x10100, 0x0) r5 = openat(r4, &(0x7f0000000280)='./file0\x00', 0x20c01, 0x99) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x40806685, &(0x7f0000000180)={0x81, 0x3}) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000400)={0x0, "339a2845e3f4b60e6b6d94e7fbfba4a8"}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001400)={0x12, 0x2, {0x800, @usage=0x2, r8, 0x7, 0x4e, 0x79, 0x0, 0x40000000, 0x8, @struct={0x8, 0xea4}, 0x400, 0xea59, [0x2f889a42, 0x8, 0x1000, 0x100000000, 0xfffffffffffffffe]}, {0xfffffffffffffffa, @struct={0xd, 0x401}, 0x0, 0xa29, 0x6, 0x7, 0x7, 0x5, 0x481, @struct={0xffffffff, 0x9}, 0x3, 0xffffffff, [0x2, 0x2, 0x6, 0x3, 0x3, 0x2]}, {0x1, @usage=0x100000001, 0x0, 0x1, 0x12, 0x80000000, 0xfff, 0x7fff, 0x4e, @struct={0xa4c, 0x5}, 0x49d, 0x0, [0x3ff, 0x4, 0xfffffffffffffffd, 0x6, 0x8000000000000001, 0x2]}, {0x587, 0xb24, 0x6}}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xaece, 0x2) read(r11, &(0x7f0000000040)=""/8, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x30, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="e2748ea72804cf1e9bc2708b01f01b1202e9ce9716c04031ecb11022f6068b6baea967d693f963b13d2083052f1787f06c397288e6d416cceade0f4e3a833bae", 0x40}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r12, 0x4020940d, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r13, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x1d}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x240040cc) shutdown(r13, 0x1) setsockopt(r13, 0x84, 0x81, &(0x7f00000002c0)="1b04004000000000", 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) 3m41.551624843s ago: executing program 3 (id=9619): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) personality(0x5400004) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 3m41.388085584s ago: executing program 3 (id=9620): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d18", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x2, 0x1) 3m41.337721784s ago: executing program 3 (id=9621): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a16ff00000005000500000000000a"], 0x70}, 0x1, 0x0, 0x9000000}, 0x0) 3m41.175711677s ago: executing program 3 (id=9623): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x84, 0x0, &(0x7f0000001080)) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2}) fcntl$setsig(r1, 0xa, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000020100c0000000000200000000000080000000"]) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040)) 3m41.131658363s ago: executing program 3 (id=9624): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x21, 0x7f, {0x7f, 0x1, "991592042d2f0e46445b09d7ae15c9b67b34e3a1520c8c278c29b64f25fc7a35cb27d5dd9dbd899510f95bf70b08affdc5cb7975d801f62d4ca12de54bd2c90de7e0fd1b39ebd6ca19094d19435e64fca83f7a08e1c4034e9c491ca9e9172bb19eb8d43c81202586c9c0da0b9b444a7d43650a7000b677ebfba105cbab"}}, &(0x7f0000000580)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "81b8d4e9f3225bb7089b55a29e9f847c086d1edb48d2f4b68c77fe1c487254ae84edc17bea356822ae747729ebf171e18e0d9d2bff46cb3a35e682f9552bb5796d5f544c93ef157f91adbad40e6e53c94cc729ff1c983a03228c404e59a69f1754cdc9a23f67b81f946834a37be0580619a4ae4568e7299fb178d52ff57e80b4e0efa7ed8c2f6022e6635b1ba99f1a67ffba1af6c5022d65f36ed5532ac4813910b102670a1a6dc467fe879356ac020fd8d8e7"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000280)={0x0, 0xa, 0x6, "6bb28e072594"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "00bde8"}, &(0x7f0000000500)={0x20, 0x82, 0x3, "c45b85"}, &(0x7f0000000640)={0x20, 0x83, 0x3, "02bccf"}, &(0x7f0000000680)={0x20, 0x84, 0x2, "9f27"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "3fcb5d"}}) shutdown(r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 3m37.788977063s ago: executing program 3 (id=9629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040)=0x1000, 0x4) 3m35.320556515s ago: executing program 44 (id=9592): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e00010000000000de6a99214e5868ba000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000003003c000000000000000a0002001c000400feff4e244e230000fc0100000000000000"], 0xbc}}, 0x0) 3m32.487682453s ago: executing program 45 (id=9600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x8054) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001840), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x10100, 0x0) r5 = openat(r4, &(0x7f0000000280)='./file0\x00', 0x20c01, 0x99) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x40806685, &(0x7f0000000180)={0x81, 0x3}) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000400)={0x0, "339a2845e3f4b60e6b6d94e7fbfba4a8"}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001400)={0x12, 0x2, {0x800, @usage=0x2, r8, 0x7, 0x4e, 0x79, 0x0, 0x40000000, 0x8, @struct={0x8, 0xea4}, 0x400, 0xea59, [0x2f889a42, 0x8, 0x1000, 0x100000000, 0xfffffffffffffffe]}, {0xfffffffffffffffa, @struct={0xd, 0x401}, 0x0, 0xa29, 0x6, 0x7, 0x7, 0x5, 0x481, @struct={0xffffffff, 0x9}, 0x3, 0xffffffff, [0x2, 0x2, 0x6, 0x3, 0x3, 0x2]}, {0x1, @usage=0x100000001, 0x0, 0x1, 0x12, 0x80000000, 0xfff, 0x7fff, 0x4e, @struct={0xa4c, 0x5}, 0x49d, 0x0, [0x3ff, 0x4, 0xfffffffffffffffd, 0x6, 0x8000000000000001, 0x2]}, {0x587, 0xb24, 0x6}}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xaece, 0x2) read(r11, &(0x7f0000000040)=""/8, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x30, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="e2748ea72804cf1e9bc2708b01f01b1202e9ce9716c04031ecb11022f6068b6baea967d693f963b13d2083052f1787f06c397288e6d416cceade0f4e3a833bae", 0x40}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r12, 0x4020940d, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r13, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x1d}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x240040cc) shutdown(r13, 0x1) setsockopt(r13, 0x84, 0x81, &(0x7f00000002c0)="1b04004000000000", 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) 3m22.190991729s ago: executing program 46 (id=9629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040)=0x1000, 0x4) 3m4.175407348s ago: executing program 1 (id=9727): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d18", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x2, 0x1) 3m3.804029855s ago: executing program 1 (id=9729): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000003c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x2, 0xe}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x2}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 3m2.824171207s ago: executing program 1 (id=9737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d18", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x2, 0x1) 3m2.640113998s ago: executing program 1 (id=9738): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000000040)) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)) 3m2.522980393s ago: executing program 1 (id=9740): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/80, 0x2f) getdents(r0, &(0x7f0000000200)=""/251, 0xfb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 3m2.358306824s ago: executing program 1 (id=9742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="5a5b0c28ecbc2e", 0x7}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="a8000000000000000301000008000000ad482c51956164f485312d202000a684517186051a06aa0c5ca06aad6a87935aa874a13388f3eac3a3fed75efd1cfa2a03e8143d9921834a5f74464c3e4d8230f6a991b83a29de5f43c4cd0076f5724bb11b59b3af390dcd938095be7a8c1fac96b76c3ec643f93eeb8d3b9cb680b81f110e334e198f20f7498f9c7570a3e68a791d3e8b6432cd9e32602c440b0ccf000000000000"], 0xa8}}, {{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d18", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x1) 3m0.250094072s ago: executing program 7 (id=9755): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d18", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x2, 0x1) 3m0.074892066s ago: executing program 7 (id=9757): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a16ff00000005000500000000000a"], 0x70}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 2m59.83140537s ago: executing program 7 (id=9760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010102, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@private}, {@loopback}, {@remote}, {@initdev}]}}) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000240)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0xfffffffffffffc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0400"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="4018012100202d"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xda, 0x19, 0x800}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x81}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_usb_control_io$printer(r2, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x6, 0xffffffffffffffff, 0xf58a, 0x5, 0xce9, 0xfff, 0x6, 0x0, 0x80, 0x2, 0x5, 0xa, 0x0, 0x2d, 0xdd3, 0x2882], 0x10000, 0x48004}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0x0, 0x0, "3ee9d800020000050000000000009000"}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x10001, 0x64, 0x9}) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000500)={0x6, 0x2, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x84}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x8, 0xc855}) 2m56.566651062s ago: executing program 7 (id=9771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000013030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a30"], 0xd0}}, 0x0) 2m56.425205607s ago: executing program 7 (id=9772): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000001440)=""/201, 0xc9}, {&(0x7f0000001540)=""/243, 0xf3}, {&(0x7f0000001640)=""/226, 0xe2}], 0x5, &(0x7f0000000300)}, 0x0) 2m56.32415534s ago: executing program 7 (id=9773): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200900000000000000000000000013a"], 0xfdef) 2m47.119490645s ago: executing program 47 (id=9742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="5a5b0c28ecbc2e", 0x7}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="a8000000000000000301000008000000ad482c51956164f485312d202000a684517186051a06aa0c5ca06aad6a87935aa874a13388f3eac3a3fed75efd1cfa2a03e8143d9921834a5f74464c3e4d8230f6a991b83a29de5f43c4cd0076f5724bb11b59b3af390dcd938095be7a8c1fac96b76c3ec643f93eeb8d3b9cb680b81f110e334e198f20f7498f9c7570a3e68a791d3e8b6432cd9e32602c440b0ccf000000000000"], 0xa8}}, {{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="4f92e8a23d18", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000dc0)="a4aef6", 0x3}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x1) 2m46.85646351s ago: executing program 5 (id=9801): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1) 2m46.646321479s ago: executing program 5 (id=9803): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2m46.335661706s ago: executing program 5 (id=9804): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="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"/284, 0xfffffffffffffecd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x3009400, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 2m46.105546645s ago: executing program 5 (id=9805): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000015c0)=""/192, 0xc0}], 0x4}}], 0x1, 0x40010122, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m45.067198121s ago: executing program 5 (id=9808): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 2m43.875772613s ago: executing program 5 (id=9809): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x305, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000000) r1 = accept$inet(r0, 0x0, &(0x7f0000000140)) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0xc, 0x4) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x20000004) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000480)=0x5, 0x4) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000500)={0x5, "34f8d2d8c9fcdc25c8ddd649bb177326ee1946147569e45ce7bf811433bfdb49", 0x200, 0xff, 0x6, 0x4, 0x1}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000580)={'geneve1\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}}) truncate(&(0x7f00000005c0)='./file0\x00', 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff4c}, @NL80211_ATTR_FRAME_MATCH={0x10, 0x5b, "5be2eaaf918c24656e21ddd6"}, @NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "6592e47d3ebd02955993790170a4b66d5b3c6ef37def6445c91458a1680eeaa27b238b8e6dec48f344a9b50cb7bcd651095bfb7ac8ba"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40008840}, 0x4000) socket$packet(0x11, 0x2, 0x300) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x5a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x4, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000880)=0x1, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000008c0)={0x79, 0x0, 0x850}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000940), 0x4) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r9, 0xc014563b, &(0x7f00000009c0)={0x8, {0x3a8, 0x4, 0x100, 0xcc}}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000a00)=0x4, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240028d0}, 0x8000000) 2m40.903118655s ago: executing program 48 (id=9773): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200900000000000000000000000013a"], 0xfdef) 2m28.814258514s ago: executing program 49 (id=9809): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x305, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000000) r1 = accept$inet(r0, 0x0, &(0x7f0000000140)) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0xc, 0x4) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x20000004) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000480)=0x5, 0x4) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000500)={0x5, "34f8d2d8c9fcdc25c8ddd649bb177326ee1946147569e45ce7bf811433bfdb49", 0x200, 0xff, 0x6, 0x4, 0x1}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000580)={'geneve1\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}}) truncate(&(0x7f00000005c0)='./file0\x00', 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff4c}, @NL80211_ATTR_FRAME_MATCH={0x10, 0x5b, "5be2eaaf918c24656e21ddd6"}, @NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "6592e47d3ebd02955993790170a4b66d5b3c6ef37def6445c91458a1680eeaa27b238b8e6dec48f344a9b50cb7bcd651095bfb7ac8ba"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40008840}, 0x4000) socket$packet(0x11, 0x2, 0x300) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x5a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x4, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000880)=0x1, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000008c0)={0x79, 0x0, 0x850}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000940), 0x4) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r9, 0xc014563b, &(0x7f00000009c0)={0x8, {0x3a8, 0x4, 0x100, 0xcc}}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000a00)=0x4, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240028d0}, 0x8000000) 9.021573195s ago: executing program 8 (id=10582): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xdcd9d000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) read(r0, &(0x7f0000000080)=""/134, 0x86) 8.862248052s ago: executing program 8 (id=10583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001000137a5b09424aa8ef1d2809dde9492f1e35856ba2c4287be577797d007e120804461831d88c3067138d28a857c1f0f92934376b77b5231957faa0711e2e39b48de65ee4b9be40136b44b866ac848433844a7580bf746295a8228dfa95004d100"/139], 0x24}, 0x1, 0x0, 0x0, 0x4044885}, 0x0) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="57e3c4ee7afc7475b36160e65b62916b873e1f2018c117b2c48e9a98eda25f6e0b45fa729056c8e41af7c5edb29df8d5a45111996a265f64652630a8b9411012a3806fbcf559a81263457aa507132285a0562e2dc46d9d76b4f236bfde735ed53dc70074e37211a0", 0x68}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r3, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d00)={&(0x7f0000000340)={0x19a4, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97e5dea797cd482da1978ef59f2a27a215f02dd326610f5c47d787d81a7dd7f7"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x648, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x47c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "356be0764a8328dda0b61103832b8e495a7eeaf507f5065a0f42480d5e015902"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x3fc, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "937ab6d65ba1e494acddde601993823d30b274ac8fed72f69fab2070c46f611d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "84bd773032812fa4f7f9a1843b6b3db9a8ddb5d24712a4c078fb0ce59ea35cee"}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb0af}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xfffffff6}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x2c8, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x5, @multicast2}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x248, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @mcast1, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x1e0, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5d8a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PEERS={0xff0, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7a2a223a30857a0132ea8514f1a8ce20b9bac0712a49d051b3435556db5ee9a9"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9f2d49a393e54688fb3df201a756cf97892f0f145c3fed0748a319dd98efcf5a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x738, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xe, @loopback, 0x89e}}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x434, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x40}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x10, @remote, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x438, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2af69231e8262010a7fb4e0d710657218f6e008142e5c28821716c06e37d0c0a"}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ad13faa6180abe030cd6d44cbf9d27fb2b5661b551c4194304d7d3d27fa5217"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c6b12ee6503c4fd56989c51259298a68f577c5f7274537b5d2251ac1970eba1"}]}, {0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @private2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dfdc0b4b792a9ce5224058595ae1e654eb1a34f7bee214925f0ad6bca19a630f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0xef}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd7d449f53739a38764d144b4100749b844b5cf774ea83c189d6141566bd7145"}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2d2b08c7a1874aaf15e497b9328714fbc5e16223539ca81a19b41e67c93336c9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @loopback, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "10854604b6f00d4cab439db2ce6076eacbe2aa806b0be69b283f16149e4499bb"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x19a4}, 0x1, 0x0, 0x0, 0x4084}, 0x44) r5 = socket(0x2, 0x3, 0x5) setsockopt(r5, 0xff, 0xfffffffe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 8.571935s ago: executing program 8 (id=10584): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r1, 0x8000001000000001, 0x3) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="4b81af89afe4c5cb7214bf3b3e576e04a6a44c1cad5928047ceba291fc66ddbdd3ef234c6d6ab756350fdeebac2d8c59d7950a8d16e6e1011390d273b03b71d4985b", 0x42}) madvise(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5ccca638000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4009010000006f4e"], 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000faff0000000600000914000200fe8800000000000000000000008000010f000700756e636f6e66696e65640000140003"], 0x54}, 0x2, 0x34005}, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 4.740030214s ago: executing program 8 (id=10602): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e00010000000000de6a99214e5868ba000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000002000a0002001c000400feff4e244e230000fc0100000000000000"], 0xbc}}, 0x0) 4.665118307s ago: executing program 8 (id=10604): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x750, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc9, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x0, 0x3}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x6}, @global=@item_4={0x3, 0x1, 0x6, "7766ad63"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@nested={0x4, 0x123}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004893}, 0x0) sendfile(r1, r2, 0x0, 0x7) r4 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0xfcfd, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e3b014b5aec34"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) write$UHID_INPUT(r10, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) 4.501768515s ago: executing program 6 (id=10606): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) close(r1) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@rose, @null, @bcast, @null, @rose, @rose, @netrom]}, &(0x7f0000000280)=0x48) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) open_by_handle_at(r1, &(0x7f00000006c0)=@fuse={0xc, 0x81, {0x49, 0x93, 0x6}}, 0x200000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x183d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb, 0x0, 0xfd}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="40030500000005a7976b40"], 0x0, 0x0, 0x0, 0x0}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x2400c800) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x800) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x440, &(0x7f0000000580)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@max_read={'max_read', 0x3d, 0x7}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, '/dev/rnullb0\x00'}}]}}) 3.388019813s ago: executing program 9 (id=10611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000011c0)=""/209, 0xd1}, {&(0x7f00000012c0)=""/126, 0x7e}], 0x8}, 0x40000100) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008aec1, &(0x7f0000000d00)={"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"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 3.22364646s ago: executing program 9 (id=10612): creat(&(0x7f0000001380)='./file0\x00', 0x516d02344bd196cc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xa, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) r3 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 3.16957207s ago: executing program 9 (id=10613): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e00010000000000de6a99214e5868ba000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000003000a0002001c000400feff4e244e230000fc0100000000000000"], 0xbc}}, 0x0) 3.048098468s ago: executing program 9 (id=10614): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc000000000000000000000000000000ff01000000000000000000000000000100000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000890001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008020000f1c402f18034426bc3de8e951284a484"], 0x17c}}, 0x0) 3.029477421s ago: executing program 9 (id=10615): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1d"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 2.809062101s ago: executing program 8 (id=10616): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x7, 0x0, [{0x7, 0xffffffff, 0x2dc43c0faeff3249, 0x0, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x8001, 0x2a, 0x7, 0x7f}, {0x40000001, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x7fffffff}, {0x80000000, 0x0, 0x5, 0x6, 0x80000000, 0x0, 0xffffffff}, {0xd, 0x2bb, 0x1, 0xd, 0x4, 0x7ff, 0xffffffff}, {0x80000008, 0x3bf, 0x0, 0xf9, 0xffffa15c, 0xa524, 0x7}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000040)={0x0, "ee22f67dc829c0c3d3e6c348a52d1f485cf6ad827da723359d4602397835a388"}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x4000) close(r7) r8 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000030109022b000100fe00000904a803022f67730809058b100002030eea08050f140004055b090725010301faffaa601f1a2ddf7bf7a6c5a64460e901da8f276db2f213492efe6000d2aa39"], 0x0) fadvise64(r3, 0x3, 0x3, 0x2) syz_usb_disconnect(r8) syz_usb_ep_write(r8, 0x41, 0xa0, &(0x7f00000000c0)="3bd9e026a05a2fc769ea6b42e075de683a29d43999556c6df255e195b1d35e0ba182744ae44e066c6094cc69821afa26a2d2f2064d9722d30bd38e964a3cd297b6234b7fbd65fee0d665462476df1e4f25addf83150bfd31bb44c22f72320d01144e773522bb937bca62b78c517d1a0b2d18cd42abe09e067a09dd9993914836572f658da745bb134ffdfa8ff2ec6e8be82cb7d20b8d47227dd9f29a02e8ab63") mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000) dup(r4) 2.245176333s ago: executing program 0 (id=10617): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}], 0x3}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x20, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2007) syz_pidfd_open(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000002}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) setns(0xffffffffffffffff, 0x2000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14d142, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 2.244009389s ago: executing program 9 (id=10625): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x4, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x2}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x34, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, &(0x7f0000000080)) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "edfd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200a0f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1.328163137s ago: executing program 6 (id=10618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0) (async) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=""/163, &(0x7f0000000280)=[{0x1, 0xe0, 0x3, &(0x7f0000000300)=""/224}]}) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) write(r0, &(0x7f0000000440)="26d6847972e4319f6e76cedcb31af7296db1560d0b845c4796687661a6c6cbd80e41da7b789944da35298ece767e361d9be5e8", 0x33) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)='H', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000000)={r5}) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x10000005}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) close(r7) write$cgroup_type(r8, &(0x7f0000000280), 0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1.046732305s ago: executing program 0 (id=10619): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff020000ffffffffffffff8b000000013a"], 0xfdef) 887.864799ms ago: executing program 6 (id=10620): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4", 0x1b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030301010b00000000000000000010"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000240)) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8044) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00)'], 0x33fe0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208001d000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mmap(&(0x7f0000747000/0x2000)=nil, 0x2000, 0x2000003, 0x30, r3, 0x4bc33000) (async) capset(&(0x7f0000000480)={0x20080522}, 0x0) 643.826018ms ago: executing program 0 (id=10621): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x1c0) (async) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x0, 0x0, 0x7, 0x0, "9c6f574b2a11d91169309bb7ada514073119fbbe15f9579db4dc31cd3b6223ac9f97995aecf4b0347fc6079acb124671758c4d8deef14dfe47a746425f589f4193725158113de86825ef7a3a9987155f"}, 0xd8) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x200, 0x7b, 0x5, 0x80000000}]}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000340)="cf5aa3b1b68c8c203a784adbce23e0f3c5dfaa0f72dbe35f29dda286ecaa68a21aecf382f4877b4e279ff83b8fd29ca5fb8d7fa963d761e39e9b71c1965fa4427b8de2dbe0d9e7497ca20f21491e333d1ca78d81510476c5aafdd38acb7b6185f575760415c231684b27f36107c4d1e62e8c43bf1305cda29204c5513314e1c0ff0016f4bcffbfc27d70d6", 0x8b, 0x40080, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='esdfs\x00', 0x8000, 0x0) 643.622412ms ago: executing program 6 (id=10622): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e00010000000000de6a99214e5868ba000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000020000a0002001c000400feff4e244e230000fc0100000000000000"], 0xbc}}, 0x0) 476.61701ms ago: executing program 6 (id=10623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3b, 0x0, 0x3}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 372.143629ms ago: executing program 0 (id=10624): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x200) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x3, 0x3, 0x2) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 266.291628ms ago: executing program 0 (id=10626): creat(&(0x7f0000000040)='./file0\x00', 0x77) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x800000, 0x0) 211.294633ms ago: executing program 6 (id=10627): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) close(r1) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@rose, @null, @bcast, @null, @rose, @rose, @netrom]}, &(0x7f0000000280)=0x48) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) open_by_handle_at(r1, &(0x7f00000006c0)=@fuse={0xc, 0x81, {0x49, 0x93, 0x6}}, 0x200000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x183d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb, 0x0, 0xfd}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="40030500000005a7976b40"], 0x0, 0x0, 0x0, 0x0}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x2400c800) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x800) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@empty, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x6000) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00000059f362ff110000082abd03000000df25020000000800d4003801bf5dda7577d141422ad8e583016fcf3f80192f8993cf4f5113905cfc09d94b10f65911313291b69c40cf92f46d65b74b32289cb50056e63b3c4167ba9277904d2bace381bb64f894ab05abc8b077316e93c48c49205745eb9d71d4c29ded24210572cbc113591e59a5bd63804c7d84c105bdfc243a9b9664d4198971a9ef6fd6e20395a435073b0638a116d9390f83e1b99396b741e56dccf12d140ef6bf602328ed6703188c68f8d466d0ec1e19ed301be30f73fc2c44e9e7610931e072"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40040) 0s ago: executing program 0 (id=10628): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x6, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}}, 0x40884) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040007031a000300", 0x33a) pipe(&(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) creat(&(0x7f0000000040)='./file0\x00', 0x192) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) kernel console output (not intermixed with test programs): 59] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1265.159318][ T9859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1265.183606][ T9859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1265.213141][ T9859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1265.225404][ T9859] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1265.242213][ T9859] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1265.251234][ T9859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1265.261159][ T9859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1265.270514][ T9859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1265.284473][ T9859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1265.291034][ T9859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1265.303877][ T9859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1265.374123][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.386882][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.585814][T15605] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1265.679238][T10042] vxfs: WRONG superblock magic 00000000 at 1 [ 1265.705946][T10042] vxfs: WRONG superblock magic 00000000 at 8 [ 1265.711997][T10042] vxfs: can't find superblock. [ 1265.761758][ T30] audit: type=1326 audit(1750603604.076:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1265.795822][T15605] usb 2-1: Using ep0 maxpacket: 8 [ 1265.822081][ T30] audit: type=1326 audit(1750603604.116:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1265.830080][T15605] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1265.883870][ T30] audit: type=1326 audit(1750603604.116:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1265.915182][T15605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.954298][ T30] audit: type=1326 audit(1750603604.116:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1265.990916][T15605] usb 2-1: Product: syz [ 1265.991776][ T30] audit: type=1326 audit(1750603604.116:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80fa78d290 code=0x7ffc0000 [ 1266.022316][ T30] audit: type=1326 audit(1750603604.116:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1266.025953][T15605] usb 2-1: Manufacturer: syz [ 1266.087541][ T30] audit: type=1326 audit(1750603604.116:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1266.118595][T15605] usb 2-1: SerialNumber: syz [ 1266.120349][ T30] audit: type=1326 audit(1750603604.116:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1266.181500][ T30] audit: type=1326 audit(1750603604.116:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1266.186726][T15605] usb 2-1: config 0 descriptor?? [ 1266.258699][ T30] audit: type=1326 audit(1750603604.116:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.7.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 1266.280085][T15605] usb 2-1: can't set config #0, error -71 [ 1266.366185][T15605] usb 2-1: USB disconnect, device number 54 [ 1266.374777][ T7432] udevd[7432]: setting mode of /dev/bus/usb/002/054 to 020664 failed: No such file or directory [ 1266.418826][ T7432] udevd[7432]: setting owner of /dev/bus/usb/002/054 to uid=0, gid=0 failed: No such file or directory [ 1266.455925][T29793] Bluetooth: hci2: command 0x0c1a tx timeout [ 1266.713983][T10084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.761649][T10084] vxfs: WRONG superblock magic 00000000 at 1 [ 1266.768048][T10084] vxfs: WRONG superblock magic 00000000 at 8 [ 1266.775268][T10084] vxfs: can't find superblock. [ 1266.991877][T10098] usb usb8: usbfs: process 10098 (syz.5.9733) did not claim interface 0 before use [ 1267.053231][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9733'. [ 1267.255911][T29793] Bluetooth: hci1: command 0x0c1a tx timeout [ 1267.262028][T29793] Bluetooth: hci4: command 0x0c1a tx timeout [ 1267.336120][T29793] Bluetooth: hci0: command 0x0c1a tx timeout [ 1267.466216][T15605] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1267.656158][T15605] usb 6-1: Using ep0 maxpacket: 16 [ 1267.673754][T15605] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1267.703407][T15605] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1267.719181][T15605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.735496][T10140] Can't find a SQUASHFS superblock on rnullb0 [ 1267.745460][T15605] usb 6-1: Product: syz [ 1267.755689][T15605] usb 6-1: Manufacturer: syz [ 1267.760345][T15605] usb 6-1: SerialNumber: syz [ 1267.803048][T15605] usb 6-1: config 0 descriptor?? [ 1267.819780][T15605] hub 6-1:0.0: bad descriptor, ignoring hub [ 1267.837410][T15605] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1267.867601][T15605] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input133 [ 1268.026204][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.035010][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.110689][T15309] usb 6-1: USB disconnect, device number 38 [ 1268.284612][T10176] netlink: 116 bytes leftover after parsing attributes in process `syz.5.9744'. [ 1268.536427][T29793] Bluetooth: hci2: command 0x0c1a tx timeout [ 1269.131867][T10210] /dev/rnullb0: Can't open blockdev [ 1269.336342][T29793] Bluetooth: hci4: command 0x0c1a tx timeout [ 1269.342420][T29793] Bluetooth: hci1: command 0x0c1a tx timeout [ 1269.415743][T29793] Bluetooth: hci0: command 0x0c1a tx timeout [ 1269.616202][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9753'. [ 1269.625123][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9753'. [ 1270.351351][T10263] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9759'. [ 1270.487783][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9759'. [ 1270.638744][T25574] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1270.795854][T25574] usb 8-1: Using ep0 maxpacket: 8 [ 1270.807973][T25574] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1270.824839][T25574] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.840760][T25574] usb 8-1: config 0 descriptor?? [ 1271.415980][T29793] Bluetooth: hci1: command 0x0c1a tx timeout [ 1271.422148][T29793] Bluetooth: hci4: command 0x0c1a tx timeout [ 1271.463689][T25574] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1271.499848][T29793] Bluetooth: hci0: command 0x0c1a tx timeout [ 1271.515581][T25574] asix 8-1:0.0: probe with driver asix failed with error -61 [ 1271.619728][T10326] : renamed from bond0 (while UP) [ 1271.685358][T10265] kvm: user requested TSC rate below hardware speed [ 1271.909750][ T397] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1272.075749][ T397] usb 6-1: Using ep0 maxpacket: 16 [ 1272.088130][ T397] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1272.102313][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.112181][ T397] usb 6-1: Product: syz [ 1272.118784][ T397] usb 6-1: Manufacturer: syz [ 1272.123484][ T397] usb 6-1: SerialNumber: syz [ 1272.141136][ T397] usb 6-1: config 0 descriptor?? [ 1272.553862][ T397] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1272.573869][ T397] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1272.592543][ T397] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1272.604000][ T397] usb 6-1: media controller created [ 1272.633794][ T397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.207248][ T397] zl10353_read_register: readreg error (reg=127, ret==0) [ 1273.223729][ T397] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1273.233964][ T397] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1273.472323][T10404] Invalid ELF header len 16 [ 1273.488019][T10404] /dev/rnullb0: Can't open blockdev [ 1273.580443][ T397] usb 8-1: USB disconnect, device number 17 [ 1274.348878][ T397] usb 6-1: USB disconnect, device number 39 [ 1274.427850][ T397] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1275.942752][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9775'. [ 1275.965169][T10503] XFS (rnullb0): Invalid superblock magic number [ 1276.355484][T10524] macvlan0: entered allmulticast mode [ 1276.365733][T10524] veth1_vlan: entered allmulticast mode [ 1276.683020][T10543] /dev/rnullb0: Can't open blockdev [ 1276.725849][ T397] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1276.904434][ T397] usb 6-1: Using ep0 maxpacket: 32 [ 1276.918419][ T397] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1276.928991][ T397] usb 6-1: config 0 has no interface number 0 [ 1276.943022][ T397] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1276.955567][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.968121][ T397] usb 6-1: Product: syz [ 1276.972319][ T397] usb 6-1: Manufacturer: syz [ 1276.978924][ T397] usb 6-1: SerialNumber: syz [ 1276.996501][ T397] usb 6-1: config 0 descriptor?? [ 1277.010512][ T397] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1277.036414][ T397] usb 6-1: selecting invalid altsetting 1 [ 1277.042258][ T397] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1277.072485][ T397] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1277.084215][ T397] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1277.098219][ T397] usb 6-1: media controller created [ 1277.132810][ T397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1277.362174][ T397] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1277.381322][ T397] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1277.393115][ T397] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1277.484036][ T397] usb 6-1: USB disconnect, device number 40 [ 1278.317771][ T397] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1278.549851][ T397] usb 6-1: device descriptor read/64, error -71 [ 1278.806020][ T397] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1278.945736][ T397] usb 6-1: device descriptor read/64, error -71 [ 1279.065948][ T397] usb usb6-port1: attempt power cycle [ 1279.415801][ T397] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1279.447346][ T397] usb 6-1: device descriptor read/8, error -71 [ 1279.695758][ T397] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1279.748307][ T397] usb 6-1: device descriptor read/8, error -71 [ 1279.856994][ T397] usb usb6-port1: unable to enumerate USB device [ 1279.905737][T10674] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1279.915392][T10674] cramfs: wrong magic [ 1283.099318][T10783] autofs: Unknown parameter '' [ 1283.789894][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1283.802874][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1283.813124][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1283.827087][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1283.846330][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1284.021840][ T9953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.189920][ T9953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.346730][ T9953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.634212][ T9953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.900949][T10814] chnl_net:caif_netlink_parms(): no params data found [ 1285.349989][T10814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.365533][T10814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.373916][T10814] bridge_slave_0: entered allmulticast mode [ 1285.384549][T10814] bridge_slave_0: entered promiscuous mode [ 1285.396083][ T9953] bridge_slave_1: left allmulticast mode [ 1285.401765][ T9953] bridge_slave_1: left promiscuous mode [ 1285.409938][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.434819][ T9953] bridge_slave_0: left allmulticast mode [ 1285.440832][ T9953] bridge_slave_0: left promiscuous mode [ 1285.447217][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.905791][ T5839] Bluetooth: hci0: command tx timeout [ 1286.152384][ T9953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.164605][ T9953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.183611][ T9953] bond0 (unregistering): Released all slaves [ 1286.204737][T10814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.215925][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.223326][T10814] bridge_slave_1: entered allmulticast mode [ 1286.247825][T10814] bridge_slave_1: entered promiscuous mode [ 1286.403887][T10814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.419887][T10814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.618726][T10814] team0: Port device team_slave_0 added [ 1286.638877][ T9953] hsr_slave_0: left promiscuous mode [ 1286.655826][ T9953] hsr_slave_1: left promiscuous mode [ 1286.661911][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.674064][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.692281][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.700809][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.732295][ T9953] veth1_macvtap: left promiscuous mode [ 1286.738033][ T9953] veth0_macvtap: left promiscuous mode [ 1286.744567][ T9953] veth1_vlan: left promiscuous mode [ 1286.750998][ T9953] veth0_vlan: left promiscuous mode [ 1287.599097][ T9953] team0 (unregistering): Port device team_slave_1 removed [ 1287.692916][ T9953] team0 (unregistering): Port device team_slave_0 removed [ 1287.975887][ T5839] Bluetooth: hci0: command tx timeout [ 1288.802099][T10814] team0: Port device team_slave_1 added [ 1288.881277][T10814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.893700][T10814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.920451][T10814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.947098][T10814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.954705][T10814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.983083][T10814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.130550][T10814] hsr_slave_0: entered promiscuous mode [ 1289.137845][T10814] hsr_slave_1: entered promiscuous mode [ 1289.159760][T10814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.167468][T10814] Cannot create hsr debugfs directory [ 1289.979106][T29793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1289.990320][T29793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1290.000833][T29793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1290.014570][T29793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1290.024709][T29793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1290.056183][ T5839] Bluetooth: hci0: command tx timeout [ 1290.159416][ T9953] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.271947][ T9953] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.422803][ T9953] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.525389][ T9953] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.582745][T10814] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1290.642081][T10814] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1290.725159][T10814] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1290.767063][T10814] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1290.938759][T11313] chnl_net:caif_netlink_parms(): no params data found [ 1291.012677][ T9953] bridge_slave_1: left allmulticast mode [ 1291.019273][ T9953] bridge_slave_1: left promiscuous mode [ 1291.025435][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.037738][ T9953] bridge_slave_0: left allmulticast mode [ 1291.044770][ T9953] bridge_slave_0: left promiscuous mode [ 1291.055221][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.294807][T11483] omfs: Invalid superblock (0) [ 1291.781304][ T9953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.792102][ T9953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.802704][ T9953] bond0 (unregistering): Released all slaves [ 1292.081992][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.107724][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.114994][T11313] bridge_slave_0: entered allmulticast mode [ 1292.129607][T11313] bridge_slave_0: entered promiscuous mode [ 1292.136054][ T5839] Bluetooth: hci1: command tx timeout [ 1292.142785][ T5839] Bluetooth: hci0: command tx timeout [ 1292.157122][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.164359][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.178022][T11313] bridge_slave_1: entered allmulticast mode [ 1292.188448][T11313] bridge_slave_1: entered promiscuous mode [ 1292.342489][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.380346][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.440061][ T9953] hsr_slave_0: left promiscuous mode [ 1292.447454][ T9953] hsr_slave_1: left promiscuous mode [ 1292.453501][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.462069][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.471227][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.479834][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.504917][ T9953] veth1_macvtap: left promiscuous mode [ 1292.510700][ T9953] veth0_macvtap: left promiscuous mode [ 1292.517212][ T9953] veth1_vlan: left promiscuous mode [ 1292.522776][ T9953] veth0_vlan: left promiscuous mode [ 1293.104322][ T9953] team0 (unregistering): Port device team_slave_1 removed [ 1293.157522][ T9953] team0 (unregistering): Port device team_slave_0 removed [ 1293.748181][T11313] team0: Port device team_slave_0 added [ 1293.769353][T11313] team0: Port device team_slave_1 added [ 1293.884728][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.895573][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.963466][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.976770][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.983752][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.015566][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.046434][T10814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.173895][T11313] hsr_slave_0: entered promiscuous mode [ 1294.185250][T11313] hsr_slave_1: entered promiscuous mode [ 1294.192131][T11313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.200702][T11313] Cannot create hsr debugfs directory [ 1294.215883][ T5839] Bluetooth: hci1: command tx timeout [ 1294.331194][T10814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.360947][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.368093][ T9958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.435316][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.442525][ T9958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.793673][T10814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1295.302785][T11791] nfs4: Unknown parameter '/dev/nullb0' [ 1295.372706][T11313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1295.400105][T11313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1295.429199][T11313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1295.458527][T11313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1295.504412][T10814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.549876][T11824] qnx4: no qnx4 filesystem (no root dir). [ 1295.758293][T11313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.812672][T11313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.864787][T11837] No control pipe specified [ 1295.868608][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.876491][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.890499][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.897711][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.014039][T11313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1296.299230][ T5839] Bluetooth: hci1: command tx timeout [ 1296.349346][T10814] veth0_vlan: entered promiscuous mode [ 1296.387124][T10814] veth1_vlan: entered promiscuous mode [ 1296.439264][T10814] veth0_macvtap: entered promiscuous mode [ 1296.455010][T10814] veth1_macvtap: entered promiscuous mode [ 1296.501696][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.514419][T10814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.533911][T10814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.562641][T10814] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.574922][T10814] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.591043][T10814] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.601179][T10814] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.734233][T11313] veth0_vlan: entered promiscuous mode [ 1296.788545][T11313] veth1_vlan: entered promiscuous mode [ 1296.794126][ T9958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.803322][ T9958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.864075][ T9942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.872866][ T9942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.953574][T11313] veth0_macvtap: entered promiscuous mode [ 1296.988271][T11313] veth1_macvtap: entered promiscuous mode [ 1297.034355][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.061458][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.106246][T11880] can0: slcan on ptm0. [ 1297.113039][T11313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.127375][T11313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.140455][T11313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.151326][T11313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.307204][T11879] can0 (unregistered): slcan off ptm0. [ 1297.387438][ T9942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.411569][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.474671][ T9942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.491018][ T9942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.673586][T11923] 9pnet: Could not find request transport: unix [ 1297.694847][T11924] 9pnet: Could not find request transport: unix [ 1298.335336][T11960] hfs: can't find a HFS filesystem on dev rnullb0 [ 1298.388556][ T5839] Bluetooth: hci1: command tx timeout [ 1300.223404][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.231004][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.037073][T12038] netlink: 'syz.0.9841': attribute type 2 has an invalid length. [ 1302.240251][T29793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1302.251190][T29793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1302.259584][T29793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1302.278479][T29793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1302.286721][T29793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1302.471432][ T9958] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.940117][ T9958] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.183307][ T9958] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.341873][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1303.341891][ T30] audit: type=1326 audit(1750603641.656:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.401974][ T30] audit: type=1326 audit(1750603641.686:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.445906][ T30] audit: type=1326 audit(1750603641.686:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.485846][ T30] audit: type=1326 audit(1750603641.696:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.523600][ T30] audit: type=1326 audit(1750603641.696:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.549464][ T9958] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.564543][ T30] audit: type=1326 audit(1750603641.696:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.588156][ T30] audit: type=1326 audit(1750603641.696:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.611589][ T30] audit: type=1326 audit(1750603641.696:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.653122][ T30] audit: type=1326 audit(1750603641.696:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.693888][ T30] audit: type=1326 audit(1750603641.696:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac58e929 code=0x7ffc0000 [ 1303.960834][T12046] chnl_net:caif_netlink_parms(): no params data found [ 1304.054080][ T9958] bridge_slave_1: left allmulticast mode [ 1304.068908][ T9958] bridge_slave_1: left promiscuous mode [ 1304.088059][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.121925][ T9958] bridge_slave_0: left allmulticast mode [ 1304.129595][ T9958] bridge_slave_0: left promiscuous mode [ 1304.135422][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.385757][ T5839] Bluetooth: hci3: command tx timeout [ 1305.158256][ T9958]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.177364][ T9958]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.198455][ T9958]  (unregistering): Released all slaves [ 1305.622389][T12046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.629754][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.639998][T12046] bridge_slave_0: entered allmulticast mode [ 1305.648120][T12046] bridge_slave_0: entered promiscuous mode [ 1305.657696][T12046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.664953][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.674142][T12046] bridge_slave_1: entered allmulticast mode [ 1305.682256][T12046] bridge_slave_1: entered promiscuous mode [ 1305.814620][ T9958] hsr_slave_0: left promiscuous mode [ 1305.825026][ T9958] hsr_slave_1: left promiscuous mode [ 1305.833230][ T9958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.845014][ T9958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.854243][ T9958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.866569][ T9958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.903692][ T9958] veth1_macvtap: left promiscuous mode [ 1305.911170][ T9958] veth0_macvtap: left promiscuous mode [ 1305.922122][ T9958] veth1_vlan: left allmulticast mode [ 1305.928955][ T9958] veth1_vlan: left promiscuous mode [ 1305.934337][ T9958] veth0_vlan: left promiscuous mode [ 1306.456213][ T5839] Bluetooth: hci3: command tx timeout [ 1306.467818][ T9958] macvlan0 (unregistering): left allmulticast mode [ 1306.767136][T12382] qnx4: no qnx4 filesystem (no root dir). [ 1306.853181][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9862'. [ 1307.144767][ T9958] team0 (unregistering): Port device team_slave_1 removed [ 1307.203607][ T9958] team0 (unregistering): Port device team_slave_0 removed [ 1307.755147][T12046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.805061][T12046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.102353][T12046] team0: Port device team_slave_0 added [ 1308.142790][T12046] team0: Port device team_slave_1 added [ 1308.307994][T12466] Mount JFS Failure: -22 [ 1308.312296][T12466] jfs_mount failed w/return code = -22 [ 1308.358320][T12046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.401365][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.441987][T12046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.455824][ T5831] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1308.479156][T12046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.489853][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.507056][T12486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1308.525335][T12046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.549839][ T5839] Bluetooth: hci3: command tx timeout [ 1308.585216][T12494] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1308.617066][ T5831] usb 10-1: device descriptor read/64, error -71 [ 1308.641586][T12504] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1308.746376][T12046] hsr_slave_0: entered promiscuous mode [ 1308.753045][T12046] hsr_slave_1: entered promiscuous mode [ 1308.767986][T12046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.788239][T12046] Cannot create hsr debugfs directory [ 1308.875950][ T5831] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1309.036972][ T5831] usb 10-1: device descriptor read/64, error -71 [ 1309.177695][ T5831] usb usb10-port1: attempt power cycle [ 1309.546662][ T5831] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1309.585362][ T5831] usb 10-1: device descriptor read/8, error -71 [ 1309.835697][ T5831] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1309.862449][T12046] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1309.877070][ T5831] usb 10-1: device descriptor read/8, error -71 [ 1309.903463][T12046] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1309.928607][T12046] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1309.949894][T12046] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1309.986245][ T5831] usb usb10-port1: unable to enumerate USB device [ 1310.083997][T12046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.127846][T12046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.183132][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.190345][ T6568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.233495][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.240725][ T6568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.615761][ T5839] Bluetooth: hci3: command tx timeout [ 1311.661055][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.669487][T12046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.715195][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.905317][T12732] [U]  [ 1311.908140][T12732] [U] K{ [ 1311.915947][T12732] [U] t 1ŠFfˊ`GJgo/mC [ 1311.937844][T12732] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1311.996946][T12732] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1312.060477][T12732] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1312.096401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.121074][T12732] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1312.183458][T12732] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1312.217024][T12732] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1312.243157][T12732] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1312.456010][T12046] veth0_vlan: entered promiscuous mode [ 1312.486589][T12046] veth1_vlan: entered promiscuous mode [ 1312.500012][T12732] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1312.513302][T12732] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1312.565788][T12732] [U] 22Ʃx?0;3u [ 1312.570053][T12732] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1312.608698][T12046] veth0_macvtap: entered promiscuous mode [ 1312.634776][T12046] veth1_macvtap: entered promiscuous mode [ 1312.671364][T12732] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1312.689368][T12046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.706603][T12732] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1312.732553][T12046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.740704][T12732] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1312.754636][T12732] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1312.769505][T12767] vxfs: WRONG superblock magic 00000000 at 1 [ 1312.781139][T12767] vxfs: WRONG superblock magic 00000000 at 8 [ 1312.801325][T12732] [U] ec [ 1312.804496][T12732] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1312.806698][T12767] vxfs: can't find superblock. [ 1312.823443][T12046] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.839365][T12046] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.848360][T12046] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.885903][T12732] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1312.912404][T12046] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.926968][T12772] FAT-fs (rnullb0): bogus number of reserved sectors [ 1312.934169][T12772] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1313.145322][ T9940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.181164][ T9940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.234124][T19255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.263298][T19255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.976400][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1313.977062][T29793] Bluetooth: hci4: command 0x1003 tx timeout [ 1314.427922][T12882] binder: BINDER_SET_CONTEXT_MGR already set [ 1314.433964][T12882] binder: 12880:12882 ioctl 4018620d 200000000040 returned -16 [ 1314.467905][T12882] binder: 12880:12882 ioctl c0306201 200000000240 returned -11 [ 1314.835739][ T10] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1314.996188][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1315.004569][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.026958][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.045670][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1315.065269][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.097339][ T10] usb 10-1: config 0 descriptor?? [ 1315.129152][ T10] hub 10-1:0.0: USB hub found [ 1315.345955][ T10] hub 10-1:0.0: 1 port detected [ 1315.351716][T12896] gfs2: gfs2 mount does not exist [ 1315.531969][ T10] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 1315.556618][ T10] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 1315.592193][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1315.603097][T12927] binder: 12925:12927 unknown command 576 [ 1315.614404][T12927] binder: 12925:12927 ioctl c0306201 200000000480 returned -22 [ 1315.635730][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1315.686686][ T10] usb 10-1: USB disconnect, device number 22 [ 1316.098346][T15309] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1316.290918][T15309] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.314923][T15309] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1316.336544][T15309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1316.358001][T15309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1316.386147][T15309] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1316.418564][T15309] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1316.443252][T15309] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1316.463755][T15309] usb 9-1: Product: syz [ 1316.471926][T15309] usb 9-1: Manufacturer: syz [ 1316.482064][T15309] usb 9-1: SerialNumber: syz [ 1316.498822][T15309] usb 9-1: config 0 descriptor?? [ 1316.723628][T12951] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.9930'. [ 1316.735315][T12951] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.9930'. [ 1316.749597][T12951] netlink: 584 bytes leftover after parsing attributes in process `syz.8.9930'. [ 1316.774438][T12951] fuse: Unknown parameter '0xffffffffffffffff' [ 1316.797903][T15309] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1316.818698][T15309] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1316.836913][T15309] usb 9-1: USB disconnect, device number 50 [ 1317.046090][ T10] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1317.239212][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1317.264563][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 1317.274928][ T10] usb 10-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.290679][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1317.300584][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1317.312701][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.320861][ T10] usb 10-1: Product: syz [ 1317.325202][ T10] usb 10-1: Manufacturer: syz [ 1317.330005][ T10] usb 10-1: SerialNumber: syz [ 1317.720732][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.734292][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.752556][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.763278][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.789273][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.805757][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.833668][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.853956][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.874208][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.881761][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.889513][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.909796][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.922955][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.945860][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.965856][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.984116][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1317.992818][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.000516][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.011738][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.031961][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.045788][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.063404][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.083644][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.095682][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.103120][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.113185][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.120718][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.128385][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.137012][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.144519][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.152305][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.170040][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.185921][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.193495][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.215927][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.223432][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.236768][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.251666][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.265203][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.280669][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.296908][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.308900][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.324015][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.346006][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.353453][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.377030][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.395898][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.403342][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.430056][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.449388][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.479409][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.499735][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.511656][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.519645][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.531423][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.541274][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.548831][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.556419][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.565713][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.573240][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.597089][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.604554][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.646065][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.653529][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.680570][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.693431][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.707677][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.723767][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.735076][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.753851][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.763702][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.773843][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.783533][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.795082][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.805072][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.814419][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.824875][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.834291][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.849051][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.878221][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.889282][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.899625][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.910323][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.919076][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.930423][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.939012][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.958654][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1318.988197][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.000677][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.009558][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.034009][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.045492][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.053980][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.070805][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.079281][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.108967][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.117800][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.132117][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.156439][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.180346][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.199769][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.230177][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.252340][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.280607][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.311343][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.335769][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.343209][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.365684][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.373129][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.389673][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.403549][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.425835][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.433281][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.453749][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.462014][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.493821][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.521165][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.532645][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.540567][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.551828][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.562076][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.585729][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.593189][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.616002][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.623467][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.666663][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.674114][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.689419][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.703888][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.717512][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.725007][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.735372][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.753785][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.773591][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.784101][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.798432][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.810037][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.838027][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.853413][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.870462][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.879811][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.891683][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.925840][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.935720][ T5831] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1319.953614][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.974423][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1319.999230][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.015894][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.032856][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.050504][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.075145][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.094222][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 1320.099437][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.114015][ T5831] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1320.132937][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.143170][ T5831] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1320.163642][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.176074][ T5831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1320.195673][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.203109][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.216148][ T5831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1320.247453][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.254904][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.262432][ T5831] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.293047][ T5831] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1320.315714][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.323169][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.345811][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.362415][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.395924][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.415851][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.423331][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.466804][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.474289][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.529449][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.563823][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.581693][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.596118][ T5831] usb 9-1: GET_CAPABILITIES returned 0 [ 1320.601947][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.609499][ T5831] usbtmc 9-1:16.0: can't read capabilities [ 1320.626837][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.641077][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.653873][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.664859][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.672389][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.683393][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.700510][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.708158][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.718529][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.731964][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.751142][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.759073][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.766599][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.781035][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1320.791569][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 1320.792658][T13100] usb 9-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1320.801214][ T5839] Bluetooth: hci3: hardware error 0x00 [ 1320.820345][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.828012][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.840359][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.848281][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.856256][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.863665][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.877614][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.885423][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.893236][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.900841][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.908396][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.915857][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.923352][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.931147][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.945046][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.952923][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.961093][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.968610][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.976396][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.983815][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1320.996848][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.006266][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.013698][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.021458][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.029980][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.037972][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.046434][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.046463][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.046490][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.046518][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.046544][T15309] hid-generic 01FF:0004:0400.002E: unknown main item tag 0x0 [ 1321.060497][T15309] hid-generic 01FF:0004:0400.002E: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1321.108938][ T10] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input134 [ 1321.114461][ T5186] bcm5974 10-1:1.0: could not read from device [ 1321.150793][ T5186] bcm5974 10-1:1.0: could not read from device [ 1321.165296][ T10] usb 10-1: USB disconnect, device number 23 [ 1321.311695][ T7296] udevd[7296]: Unable to EVIOCGABS device "/dev/input/event4" [ 1321.311814][ T7296] udevd[7296]: Unable to EVIOCGABS device "/dev/input/event4" [ 1321.311920][ T7296] udevd[7296]: Unable to EVIOCGABS device "/dev/input/event4" [ 1321.312026][ T7296] udevd[7296]: Unable to EVIOCGABS device "/dev/input/event4" [ 1321.367736][T13178] fido_id[13178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1321.545267][T13163] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1321.579947][T13166] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1321.718119][ T7038] usb 9-1: USB disconnect, device number 51 [ 1321.914697][T13233] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1321.924075][T13233] cramfs: wrong magic [ 1322.036060][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1322.060164][T13237] hfs: can't find a HFS filesystem on dev rnullb0 [ 1322.195798][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1322.202882][ T10] usb 10-1: config 0 has no interfaces? [ 1322.211993][ T10] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1322.241724][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.252131][ T10] usb 10-1: Product: syz [ 1322.280729][ T10] usb 10-1: Manufacturer: syz [ 1322.287183][ T10] usb 10-1: SerialNumber: syz [ 1322.303340][ T10] usb 10-1: config 0 descriptor?? [ 1322.518204][T13213] kAFS: unparsable volume name [ 1322.526104][ T5831] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1322.528717][ T7038] usb 10-1: USB disconnect, device number 24 [ 1322.685694][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 1322.698090][ T5831] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.714911][ T5831] usb 9-1: config 0 has no interfaces? [ 1322.724235][ T5831] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1322.743751][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.768300][ T5831] usb 9-1: Product: syz [ 1322.772515][ T5831] usb 9-1: Manufacturer: syz [ 1322.793706][ T5831] usb 9-1: SerialNumber: syz [ 1322.810390][ T5831] usb 9-1: config 0 descriptor?? [ 1323.015793][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1323.048585][ T10] usb 9-1: USB disconnect, device number 52 [ 1323.399609][T13327] /dev/rnullb0: Can't open blockdev [ 1323.405561][T13327] /dev/rnullb0: Can't open blockdev [ 1323.439657][T13327] /dev/rnullb0: Can't open blockdev [ 1323.730643][T13348] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1323.970300][ T5831] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1324.117267][ T5831] usb 10-1: device descriptor read/64, error -71 [ 1324.201558][T13368] FAT-fs (rnullb0): bogus number of reserved sectors [ 1324.221490][T13368] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1324.241908][T13374] MTD: Attempt to mount non-MTD device "/dev/md0" [ 1324.253725][T13374] syz.6.9970: attempt to access beyond end of device [ 1324.253725][T13374] md0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1324.396062][ T5831] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1324.546185][ T5831] usb 10-1: device descriptor read/64, error -71 [ 1324.579689][T13391] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1324.601362][T13391] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1324.601362][T13391] [ 1324.664338][ T5831] usb usb10-port1: attempt power cycle [ 1324.905503][T13410] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9977'. [ 1324.945779][T13410] openvswitch: netlink: EtherType 0 is less than min 600 [ 1325.026132][ T5831] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1325.057469][ T5831] usb 10-1: device descriptor read/8, error -71 [ 1325.296773][ T5831] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1325.337569][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1325.337587][ T30] audit: type=1800 audit(1750603663.646:195): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9979" name="[kvm-gmem]" dev="anon_inodefs" ino=180671 res=0 errno=0 [ 1325.338105][ T5831] usb 10-1: device descriptor read/8, error -71 [ 1325.508740][ T5831] usb usb10-port1: unable to enumerate USB device [ 1326.818104][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9980'. [ 1328.536770][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9990'. [ 1328.601342][T13502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.671647][T13499] /dev/nullb0: Can't open blockdev [ 1328.784073][T13519] FAULT_INJECTION: forcing a failure. [ 1328.784073][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.880731][T13519] CPU: 0 UID: 0 PID: 13519 Comm: syz.8.9993 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1328.880761][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1328.880774][T13519] Call Trace: [ 1328.880781][T13519] [ 1328.880790][T13519] dump_stack_lvl+0x189/0x250 [ 1328.880824][T13519] ? __pfx____ratelimit+0x10/0x10 [ 1328.880853][T13519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1328.880876][T13519] ? __pfx__printk+0x10/0x10 [ 1328.880899][T13519] ? __might_fault+0xb0/0x130 [ 1328.880933][T13519] should_fail_ex+0x414/0x560 [ 1328.880962][T13519] _copy_from_user+0x2d/0xb0 [ 1328.880983][T13519] ___sys_sendmsg+0x158/0x2a0 [ 1328.881012][T13519] ? __pfx____sys_sendmsg+0x10/0x10 [ 1328.881073][T13519] ? __fget_files+0x2a/0x420 [ 1328.881102][T13519] ? __fget_files+0x3a0/0x420 [ 1328.881140][T13519] __sys_sendmmsg+0x227/0x430 [ 1328.881171][T13519] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1328.881194][T13519] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1328.881239][T13519] ? ksys_write+0x22a/0x250 [ 1328.881266][T13519] ? __pfx_ksys_write+0x10/0x10 [ 1328.881289][T13519] ? rcu_is_watching+0x15/0xb0 [ 1328.881319][T13519] __x64_sys_sendmmsg+0xa0/0xc0 [ 1328.881347][T13519] do_syscall_64+0xfa/0x3b0 [ 1328.881365][T13519] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.881393][T13519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.881414][T13519] ? clear_bhb_loop+0x60/0xb0 [ 1328.881438][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.881457][T13519] RIP: 0033:0x7ff291d8e929 [ 1328.881474][T13519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.881492][T13519] RSP: 002b:00007ff292c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1328.881514][T13519] RAX: ffffffffffffffda RBX: 00007ff291fb5fa0 RCX: 00007ff291d8e929 [ 1328.881529][T13519] RDX: 0000000000000001 RSI: 0000200000001240 RDI: 0000000000000003 [ 1328.881542][T13519] RBP: 00007ff292c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.881554][T13519] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1328.881563][T13519] R13: 0000000000000000 R14: 00007ff291fb5fa0 R15: 00007ffdfe986d28 [ 1328.881585][T13519] [ 1328.927776][T13527] vivid-003: disconnect [ 1328.928870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.191852][T13533] input: syz0 as /devices/virtual/input/input135 [ 1329.506074][T13550] XFS (rnullb0): Invalid superblock magic number [ 1329.817089][T13521] vivid-003: reconnect [ 1330.006161][T15309] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1330.187004][T15309] usb 9-1: Using ep0 maxpacket: 8 [ 1330.200073][T15309] usb 9-1: config 0 has an invalid interface number: 155 but max is 0 [ 1330.219437][T15309] usb 9-1: config 0 has no interface number 0 [ 1330.229993][T15309] usb 9-1: config 0 interface 155 has no altsetting 0 [ 1330.241508][T15309] usb 9-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice=32.14 [ 1330.252028][T15309] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.269086][T15309] usb 9-1: Product: syz [ 1330.273508][T15309] usb 9-1: Manufacturer: syz [ 1330.278635][T15309] usb 9-1: SerialNumber: syz [ 1330.294412][T15309] usb 9-1: config 0 descriptor?? [ 1330.473608][T13602] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1330.482965][T13602] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1330.482965][T13602] [ 1330.572946][T13565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.604107][T13565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.193753][T15309] usb-storage 9-1:0.155: USB Mass Storage device detected [ 1332.322557][T15309] usb 9-1: USB disconnect, device number 53 [ 1333.004043][T13678] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1333.037752][T13678] cramfs: wrong magic [ 1333.222972][T13684] Invalid source name [ 1333.235695][T13684] UBIFS error (pid: 13684): cannot open "/dev/sr0", error -22 [ 1333.507289][T13701] FAT-fs (rnullb0): bogus number of reserved sectors [ 1333.544137][T13701] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1334.086045][T13733] vxfs: WRONG superblock magic 00000000 at 1 [ 1334.092435][T13733] vxfs: WRONG superblock magic 00000000 at 8 [ 1334.123570][T13733] vxfs: can't find superblock. [ 1334.237770][T13740] Can't find a SQUASHFS superblock on rnullb0 [ 1334.532270][T13751] FAT-fs (rnullb0): bogus number of reserved sectors [ 1334.596226][T13751] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1335.110389][T13779] netlink: 'syz.0.10042': attribute type 3 has an invalid length. [ 1335.292319][T13794] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1335.446131][T31871] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1335.743090][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10048'. [ 1336.077642][T31871] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.102933][T31871] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1336.141456][T31871] usb 9-1: config 1 has no interface number 1 [ 1336.156134][T31871] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1336.194133][T31871] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1336.225036][T31871] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1336.244923][T31871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.295712][T31871] usb 9-1: Product: syz [ 1336.299933][T31871] usb 9-1: Manufacturer: syz [ 1336.305367][T31871] usb 9-1: SerialNumber: syz [ 1336.349493][T13783] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1336.656895][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10043'. [ 1336.665995][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10043'. [ 1336.674981][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10043'. [ 1336.810163][T31871] usb 9-1: USB disconnect, device number 54 [ 1336.855115][ T7432] udevd[7432]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.033619][T13865] Invalid ELF header magic: != ELF [ 1337.096221][T13871] /dev/rnullb0: Can't open blockdev [ 1337.469916][T13895] netlink: 'syz.8.10058': attribute type 29 has an invalid length. [ 1337.480577][T13899] netlink: 'syz.8.10058': attribute type 29 has an invalid length. [ 1337.492362][T13895] netlink: 'syz.8.10058': attribute type 29 has an invalid length. [ 1338.541952][T13938] overlay: Unknown parameter 'fsmagic' [ 1338.739877][T13951] /dev/rnullb0: Can't open blockdev [ 1338.804744][T13954] /dev/rnullb0: Can't open blockdev [ 1338.995738][T25574] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1339.146202][T25574] usb 10-1: Using ep0 maxpacket: 8 [ 1339.167999][T25574] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1339.185458][T25574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1339.205999][T25574] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1339.224237][T25574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1339.236006][T25574] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1339.258830][T25574] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1339.276058][T25574] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.295636][T25574] usb 10-1: Product: syz [ 1339.299951][T25574] usb 10-1: Manufacturer: syz [ 1339.304649][T25574] usb 10-1: SerialNumber: syz [ 1339.328477][T25574] usb 10-1: config 0 descriptor?? [ 1339.352976][T25574] kvaser_usb 10-1:0.0: error -EMSGSIZE: Cannot get software info [ 1339.368738][T25574] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1339.379249][T13979] netlink: 80 bytes leftover after parsing attributes in process `syz.8.10071'. [ 1339.411243][T13976] /dev/rnullb0: Can't open blockdev [ 1339.421283][T13979] sit0: entered promiscuous mode [ 1339.430442][T13979] sit0: entered allmulticast mode [ 1339.500646][T13985] /dev/rnullb0: Can't open blockdev [ 1339.590500][T25574] usb 10-1: USB disconnect, device number 29 [ 1339.877189][T14016] Can't find a SQUASHFS superblock on rnullb0 [ 1339.909015][ T10] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1339.942946][T14020] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 1340.078450][ T10] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1340.095958][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.111570][ T10] usb 9-1: config 0 descriptor?? [ 1340.130609][ T10] cp210x 9-1:0.0: cp210x converter detected [ 1340.530305][ T10] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1340.595740][T25574] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 1340.735776][T25574] usb 10-1: device descriptor read/64, error -71 [ 1340.779953][ T10] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1340.957487][ T10] usb 9-1: USB disconnect, device number 55 [ 1340.975898][T25574] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 1340.992187][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1341.049846][ T10] cp210x 9-1:0.0: device disconnected [ 1341.135682][T25574] usb 10-1: device descriptor read/64, error -71 [ 1341.263917][T25574] usb usb10-port1: attempt power cycle [ 1341.618787][T25574] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 1341.658727][T25574] usb 10-1: device descriptor read/8, error -71 [ 1341.777951][T14106] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 1341.818634][T14106] cramfs: wrong magic [ 1341.915679][T25574] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 1341.969448][T25574] usb 10-1: device descriptor read/8, error -71 [ 1342.036549][T14114] /dev/sg0: Can't lookup blockdev [ 1342.096077][T25574] usb usb10-port1: unable to enumerate USB device [ 1342.199163][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10084'. [ 1343.081122][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10089'. [ 1343.277622][T14176] overlay: ./file0 is not a directory [ 1343.443422][T14184] veth0_vlan: entered allmulticast mode [ 1343.451429][T14184] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1343.676809][T14194] netlink: 'syz.8.10094': attribute type 1 has an invalid length. [ 1343.684713][T14194] netlink: 'syz.8.10094': attribute type 101 has an invalid length. [ 1343.795680][T14194] netlink: 564 bytes leftover after parsing attributes in process `syz.8.10094'. [ 1343.956135][T14184] cramfs: wrong magic [ 1343.972266][T14183] veth0_vlan: left allmulticast mode [ 1344.337057][T14219] FAT-fs (rnullb0): bogus number of reserved sectors [ 1344.392692][T14219] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1345.728355][T14262] qnx4: no qnx4 filesystem (no root dir). [ 1347.525441][T14327] program syz.0.10118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1347.745674][T15309] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 1347.885710][T15309] usb 10-1: device descriptor read/64, error -71 [ 1348.157455][T15309] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 1348.315852][T15309] usb 10-1: device descriptor read/64, error -71 [ 1348.436371][T15309] usb usb10-port1: attempt power cycle [ 1348.787102][T15309] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1348.846462][T15309] usb 10-1: device descriptor read/8, error -71 [ 1348.884499][T14386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1349.097993][T15309] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1349.136413][T15309] usb 10-1: device descriptor read/8, error -71 [ 1349.256094][T15309] usb usb10-port1: unable to enumerate USB device [ 1350.639992][T14449] FAT-fs (rnullb0): bogus number of reserved sectors [ 1350.675803][T14449] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1351.442918][T14488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.093285][T14572] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1353.103999][T14572] UDF-fs: Scanning with blocksize 4096 failed [ 1353.167546][ T30] audit: type=1326 audit(1750603691.486:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.8.10160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff291d8e929 code=0x0 [ 1353.742687][T14608] hfs: can't find a HFS filesystem on dev rnullb0 [ 1354.209772][T14618] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1354.225757][T14618] UDF-fs: Scanning with blocksize 4096 failed [ 1354.446030][T14639] (syz.8.10168,14639,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1354.454861][T14639] (syz.8.10168,14639,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1354.842590][T14664] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1354.874441][T14666] exFAT-fs (rnullb0): invalid boot record signature [ 1354.898896][T14664] /dev/rnullb0: Can't open blockdev [ 1354.913470][T14666] exFAT-fs (rnullb0): failed to read boot sector [ 1354.957673][T14666] exFAT-fs (rnullb0): failed to recognize exfat type [ 1354.971090][T14668] netlink: 316 bytes leftover after parsing attributes in process `syz.9.10175'. [ 1356.082711][T31871] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1356.240236][T31871] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1356.290109][T31871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.309616][T31871] usb 9-1: Product: syz [ 1356.321847][T31871] usb 9-1: Manufacturer: syz [ 1356.339787][T31871] usb 9-1: SerialNumber: syz [ 1356.379655][T31871] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1356.417991][ T5896] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1356.539835][T15309] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1356.696035][T15309] usb 10-1: Using ep0 maxpacket: 16 [ 1356.708212][T15309] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.728599][T15309] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1356.735416][T15309] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1356.765663][T15309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.798766][T15309] usb 10-1: config 0 descriptor?? [ 1356.844700][ T397] usb 9-1: USB disconnect, device number 56 [ 1356.999433][T14787] loop6: detected capacity change from 0 to 63 [ 1357.001686][T14788] buffer_io_error: 44 callbacks suppressed [ 1357.001703][T14788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.033563][T14788] Buffer I/O error on dev loop6, logical block 1, async page read [ 1357.044087][T14788] Buffer I/O error on dev loop6, logical block 2, async page read [ 1357.052539][T14788] Buffer I/O error on dev loop6, logical block 3, async page read [ 1357.061704][ T7432] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.070164][ T7432] Buffer I/O error on dev loop6, logical block 1, async page read [ 1357.078990][ T7432] Buffer I/O error on dev loop6, logical block 2, async page read [ 1357.091093][ T7432] Buffer I/O error on dev loop6, logical block 3, async page read [ 1357.100409][T14787] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.109625][T14787] Buffer I/O error on dev loop6, logical block 1, async page read [ 1357.238692][T15309] hid (null): invalid report_size 27470344 [ 1357.251495][T15309] hid (null): invalid report_count 1372156008 [ 1357.265942][T15309] hid (null): unknown global tag 0xd [ 1357.271334][T15309] hid (null): unknown global tag 0xd [ 1357.309391][T15309] cougar 0003:060B:500A.002F: unexpected long global item [ 1357.326510][T15309] cougar 0003:060B:500A.002F: parse failed [ 1357.332459][T15309] cougar 0003:060B:500A.002F: probe with driver cougar failed with error -22 [ 1357.507628][ T5896] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1357.514711][ T5896] ath9k_htc: Failed to initialize the device [ 1357.542279][ T397] usb 9-1: ath9k_htc: USB layer deinitialized [ 1357.590880][T14753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1357.628597][T15309] usb 10-1: USB disconnect, device number 38 [ 1357.860214][ T397] usb 9-1: new low-speed USB device number 57 using dummy_hcd [ 1358.026713][ T397] usb 9-1: Invalid ep0 maxpacket: 16 [ 1358.080762][T14846] FAT-fs (rnullb0): bogus number of reserved sectors [ 1358.097639][T14846] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1358.165932][ T397] usb 9-1: new low-speed USB device number 58 using dummy_hcd [ 1358.336011][ T397] usb 9-1: Invalid ep0 maxpacket: 16 [ 1358.352007][ T397] usb usb9-port1: attempt power cycle [ 1358.470117][T15309] IPVS: starting estimator thread 0... [ 1358.566088][T14873] IPVS: using max 27 ests per chain, 64800 per kthread [ 1358.578955][T14882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.705689][ T397] usb 9-1: new low-speed USB device number 59 using dummy_hcd [ 1358.770770][ T397] usb 9-1: Invalid ep0 maxpacket: 16 [ 1358.996249][ T397] usb 9-1: new low-speed USB device number 60 using dummy_hcd [ 1359.027622][ T397] usb 9-1: Invalid ep0 maxpacket: 16 [ 1359.033704][ T397] usb usb9-port1: unable to enumerate USB device [ 1360.583137][T14957] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1360.594378][T14957] /dev/rnullb0: Can't open blockdev [ 1361.006603][T14984] /dev/rnullb0: Can't open blockdev [ 1361.194395][T14993] /dev/rnullb0: Can't open blockdev [ 1361.527218][T15007] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10216'. [ 1361.707434][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.715733][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.813297][T15016] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10216'. [ 1361.866731][T15007] /dev/rnullb0: Can't open blockdev [ 1362.061725][T15021] /dev/rnullb0: Can't open blockdev [ 1362.675753][ T397] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1362.838560][ T397] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 1362.861611][ T397] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1362.878661][ T397] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1423, setting to 1024 [ 1362.894637][ T397] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1362.909550][ T397] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1362.919071][ T397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.928452][ T397] usb 10-1: Product: syz [ 1362.933365][ T397] usb 10-1: Manufacturer: syz [ 1362.945416][ T397] usb 10-1: SerialNumber: syz [ 1363.248068][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10223'. [ 1363.357061][T15084] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1363.379032][ T397] cdc_ncm 10-1:1.0: bind() failure [ 1363.400089][ T397] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1363.428096][ T397] cdc_ncm 10-1:1.1: bind() failure [ 1363.463989][ T397] usb 10-1: USB disconnect, device number 39 [ 1363.626075][ T5831] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1363.787137][ T5831] usb 9-1: device descriptor read/64, error -71 [ 1364.046804][ T5831] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1364.141893][T15139] FAT-fs (rnullb0): bogus number of reserved sectors [ 1364.182345][T15139] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1364.195709][ T5831] usb 9-1: device descriptor read/64, error -71 [ 1364.326092][ T5831] usb usb9-port1: attempt power cycle [ 1364.354162][T15150] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10232'. [ 1364.398993][T15147] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10232'. [ 1364.416290][T15150] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10232'. [ 1364.685774][ T5831] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1364.726465][ T5831] usb 9-1: device descriptor read/8, error -71 [ 1364.985881][ T5831] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1365.006527][ T5831] usb 9-1: device descriptor read/8, error -71 [ 1365.116113][ T5831] usb usb9-port1: unable to enumerate USB device [ 1365.186314][T15171] QAT: Invalid ioctl 9 [ 1365.425799][ T397] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1365.596918][ T397] usb 10-1: Using ep0 maxpacket: 32 [ 1365.619561][ T397] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.634580][ T397] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1365.649477][ T397] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1365.660296][ T397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.679499][ T397] usb 10-1: Product: ࠊ [ 1365.688459][ T397] usb 10-1: Manufacturer: Љ [ 1365.701861][ T397] usb 10-1: SerialNumber: 杌庖䛗삹퍢頑䦇䯯걆諞頛＾猘Ⰹ窞ᶥ切〃㭇⯵ᏻꚩ댠炔鄲㾯഼䉲⴪쏐⁉⟈灷䤬宧篁搡賺ﴷ蕫㳇騭⧩蓔抂 [ 1366.003001][T15229] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1366.019650][T15229] /dev/rnullb0: Can't open blockdev [ 1366.159554][T15171] QAT: Invalid ioctl 1074030369 [ 1366.168131][ T397] usb 10-1: 0:2 : does not exist [ 1366.215204][ T397] usb 10-1: USB disconnect, device number 40 [ 1366.782290][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.792010][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.810795][ T5831] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1366.978404][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 1366.995687][ T5831] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1367.016193][T25574] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1367.019946][ T5831] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1423, setting to 1024 [ 1367.046777][T15320] /dev/rnullb0: Can't open blockdev [ 1367.052269][ T5831] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1367.075521][ T5831] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1367.100764][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.108949][ T5831] usb 9-1: Product: syz [ 1367.115664][ T5831] usb 9-1: Manufacturer: syz [ 1367.120299][ T5831] usb 9-1: SerialNumber: syz [ 1367.189411][T25574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.210942][T25574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.235768][T25574] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1367.274479][T25574] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1367.295756][T25574] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.303410][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805bfac400: rx timeout, send abort [ 1367.317883][T25574] usb 10-1: config 0 descriptor?? [ 1367.555806][ T5831] cdc_ncm 9-1:1.0: bind() failure [ 1367.579736][T15337] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1367.641720][T15337] /dev/rnullb0: Can't open blockdev [ 1367.648668][ T5831] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1367.670461][ T5831] cdc_ncm 9-1:1.1: bind() failure [ 1367.693684][ T5831] usb 9-1: USB disconnect, device number 65 [ 1367.728557][T15301] /dev/rnullb0: Can't open blockdev [ 1367.787831][T25574] usbhid 10-1:0.0: can't add hid device: -71 [ 1367.794010][T25574] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1367.812221][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805bfac400: abort rx timeout. Force session deactivation [ 1367.823794][T25574] usb 10-1: USB disconnect, device number 41 [ 1368.444978][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10263'. [ 1368.863498][T15402] /dev/rnullb0: Can't open blockdev [ 1368.888105][T15405] /dev/rnullb0: Can't open blockdev [ 1368.906234][T15410] /dev/rnullb0: Can't open blockdev [ 1369.130710][T15422] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1369.158331][T15422] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1369.521991][T15445] /dev/rnullb0: Can't open blockdev [ 1370.150994][T15477] (syz.6.10282,15477,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1370.165402][T15477] (syz.6.10282,15477,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1370.227820][T15482] netlink: 408 bytes leftover after parsing attributes in process `syz.9.10283'. [ 1370.238001][T15482] tipc: Started in network mode [ 1370.242978][T15482] tipc: Node identity fe800000000000000000000000000026, cluster identity 4711 [ 1370.253101][T15482] tipc: Enabled bearer , priority 10 [ 1370.336360][T15485] omfs: Invalid superblock (0) [ 1371.180340][T15511] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1371.291229][T15519] /dev/rnullb0: Can't open blockdev [ 1371.374374][T31871] tipc: Node number set to 4269801510 [ 1372.140452][T15557] /dev/rnullb0: Can't open blockdev [ 1372.156835][ T397] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1372.237578][T15563] /dev/rnullb0: Can't open blockdev [ 1372.325832][ T397] usb 9-1: Using ep0 maxpacket: 32 [ 1372.336820][ T397] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1372.346641][ T7038] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1372.375640][ T397] usb 9-1: config 0 has no interface number 0 [ 1372.394298][ T397] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1372.410400][ T397] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.422644][ T397] usb 9-1: Product: syz [ 1372.427164][ T397] usb 9-1: Manufacturer: syz [ 1372.431895][ T397] usb 9-1: SerialNumber: syz [ 1372.449313][ T397] usb 9-1: config 0 descriptor?? [ 1372.485791][ T397] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 1372.493397][ T397] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 1372.506039][ T7038] usb 10-1: device descriptor read/64, error -71 [ 1372.689304][ T397] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1372.726083][ T397] usbhid 9-1:0.35: couldn't find an input interrupt endpoint [ 1372.745734][ T7038] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1372.779641][ T397] usb 9-1: USB disconnect, device number 66 [ 1372.902548][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10298'. [ 1372.915875][ T7038] usb 10-1: device descriptor read/64, error -71 [ 1372.922350][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10298'. [ 1372.940262][T15596] /dev/rnullb0: Can't open blockdev [ 1373.046433][ T7038] usb usb10-port1: attempt power cycle [ 1373.059916][T15604] syzkaller1: entered promiscuous mode [ 1373.070804][T15604] syzkaller1: entered allmulticast mode [ 1373.081918][T15604] syz.0.10299: attempt to access beyond end of device [ 1373.081918][T15604] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1373.106765][T15604] SQUASHFS error: Failed to read block 0x0: -5 [ 1373.113007][T15604] unable to read squashfs_super_block [ 1373.258737][T15617] /dev/rnullb0: Can't open blockdev [ 1373.396251][ T7038] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1373.427100][ T7038] usb 10-1: device descriptor read/8, error -71 [ 1373.505455][T15633] /dev/rnullb0: Can't open blockdev [ 1373.688509][ T7038] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1373.755654][ T7038] usb 10-1: device descriptor read/8, error -71 [ 1373.799973][T15651] /dev/rnullb0: Can't open blockdev [ 1373.866333][ T7038] usb usb10-port1: unable to enumerate USB device [ 1375.131049][T15699] syz.0.10309 (15699): attempted to duplicate a private mapping with mremap. This is not supported. [ 1375.539768][T15713] hfs: can't find a HFS filesystem on dev rnullb0 [ 1375.696962][T15733] omfs: Invalid superblock (0) [ 1376.126389][T15759] netlink: 'syz.9.10318': attribute type 1 has an invalid length. [ 1376.134474][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10318'. [ 1378.375895][ T7038] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1378.532653][ T7038] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.548693][ T7038] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.558901][ T7038] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1378.568478][ T7038] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.586403][ T7038] usb 10-1: config 0 descriptor?? [ 1381.156599][ T7038] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 1381.194309][ T7038] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 1381.214399][ T7038] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 1381.226920][ T7038] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 1381.267122][ T7038] uclogic 0003:256C:006D.0030: probe with driver uclogic failed with error -71 [ 1381.298600][ T7038] usb 10-1: USB disconnect, device number 46 [ 1381.442693][T15992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1381.462256][T15984] XFS (rnullb0): Invalid superblock magic number [ 1381.501640][T15992] /dev/rnullb0: Can't open blockdev [ 1381.605487][T16000] (syz.8.10331,16000,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1381.646193][T16000] (syz.8.10331,16000,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1382.666053][ T5831] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1382.870607][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1382.892829][ T30] audit: type=1800 audit(1750603721.206:197): pid=16065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10344" name="dmabuf" dev="dmabuf" ino=40 res=0 errno=0 [ 1382.918710][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.934098][ T5831] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1382.948615][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.984055][ T5831] usb 10-1: config 0 descriptor?? [ 1383.093415][T16077] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1383.118236][T16077] /dev/rnullb0: Can't open blockdev [ 1383.450245][ T5831] savu 0003:1E7D:2D5A.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1384.102136][T15605] usb 10-1: USB disconnect, device number 47 [ 1385.531553][T16234] qnx4: no qnx4 filesystem (no root dir). [ 1385.596509][T16239] qnx4: no qnx4 filesystem (no root dir). [ 1385.609327][T16240] /dev/rnullb0: Can't open blockdev [ 1385.625669][T16241] /dev/rnullb0: Can't open blockdev [ 1385.898975][T16253] FAT-fs (rnullb0): bogus number of reserved sectors [ 1385.914004][T16253] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1386.069346][T16257] FAT-fs (rnullb0): bogus number of reserved sectors [ 1386.087364][T16257] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1387.406544][ T24] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1387.565786][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1387.583594][ T24] usb 10-1: config 1 interface 0 altsetting 54 bulk endpoint 0x1 has invalid maxpacket 8 [ 1387.622387][ T24] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1387.649265][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1387.685324][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.697026][T16323] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 1387.710409][ T24] usb 10-1: Product: syz [ 1387.744763][ T24] usb 10-1: Manufacturer: syz [ 1387.750431][ T24] usb 10-1: SerialNumber: syz [ 1387.789441][T16299] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1388.169994][T16344] overlayfs: conflicting options: nfs_export=on,index=off [ 1388.235754][ T24] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 54 proto 3 vid 0x0525 pid 0xA4A8 [ 1388.270720][ T24] usb 10-1: USB disconnect, device number 48 [ 1388.306794][ T24] usblp0: removed [ 1388.565854][T31871] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1388.715674][T31871] usb 9-1: device descriptor read/64, error -71 [ 1388.976018][T31871] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1389.033062][T16411] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1389.052552][T16411] /dev/rnullb0: Can't open blockdev [ 1389.116149][T31871] usb 9-1: device descriptor read/64, error -71 [ 1389.239243][T31871] usb usb9-port1: attempt power cycle [ 1389.595684][T31871] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1389.626552][T31871] usb 9-1: device descriptor read/8, error -71 [ 1389.875727][T31871] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1389.916707][T31871] usb 9-1: device descriptor read/8, error -71 [ 1389.955930][ T24] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1390.038582][T31871] usb usb9-port1: unable to enumerate USB device [ 1390.137398][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.151531][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.181957][ T24] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1390.191935][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.213739][ T24] usb 10-1: config 0 descriptor?? [ 1390.651014][ T24] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 1390.681745][ T24] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1390.844257][ T24] cp2112 0003:10C4:EA90.0032: Part Number: 0x82 Device Version: 0xFE [ 1392.357428][T16597] netlink: 2928 bytes leftover after parsing attributes in process `syz.0.10391'. [ 1392.403940][T16597] XFS (rnullb0): Invalid superblock magic number [ 1392.722030][T16449] orangefs_mount: mount request failed with -4 [ 1392.787643][ T24] cp2112 0003:10C4:EA90.0032: error requesting SMBus config [ 1392.812169][ T24] cp2112 0003:10C4:EA90.0032: probe with driver cp2112 failed with error -71 [ 1392.853590][ T24] usb 10-1: USB disconnect, device number 49 [ 1393.132131][T16649] gfs2: not a GFS2 filesystem [ 1393.192239][T16649] netlink: zone id is out of range [ 1393.199783][T16649] netlink: zone id is out of range [ 1393.221141][T16649] netlink: zone id is out of range [ 1393.233237][T16649] netlink: zone id is out of range [ 1393.272300][T16649] netlink: zone id is out of range [ 1393.299752][T16649] netlink: zone id is out of range [ 1393.305073][T16649] netlink: zone id is out of range [ 1393.310831][T16649] netlink: zone id is out of range [ 1393.322421][T16649] netlink: zone id is out of range [ 1393.346733][T16649] netlink: zone id is out of range [ 1394.127901][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10409'. [ 1394.264420][T16702] FAT-fs (rnullb0): bogus number of reserved sectors [ 1394.285891][T16702] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1394.298688][T16703] FAT-fs (rnullb0): bogus number of reserved sectors [ 1394.315441][T16703] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1394.575420][T16723] (syz.0.10416,16723,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1394.608188][T16723] (syz.0.10416,16723,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1394.648234][T16726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.674782][T16726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.699031][T16723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.709039][ T9] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1394.729407][T16723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.875748][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1394.884704][ T9] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1394.899617][ T9] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1394.913513][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1394.923174][ T9] usb 10-1: config 1 has no interface number 0 [ 1394.960474][ T9] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1394.994984][ T9] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1395.017657][ T9] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1395.029374][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.055067][ T9] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1395.259274][ T9] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1395.290131][T16770] Can't find a SQUASHFS superblock on rnullb0 [ 1395.529684][ T5896] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1395.663231][T16712] overlayfs: conflicting options: userxattr,metacopy=on [ 1395.685963][ T9] usb 10-1: USB disconnect, device number 50 [ 1395.690059][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1395.716876][ T9] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1395.960459][ T5896] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1396.105952][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1396.222830][ T5896] usb usb9-port1: attempt power cycle [ 1396.461719][T16813] (syz.9.10426,16813,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1396.486874][T16813] (syz.9.10426,16813,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1396.575928][ T5896] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1396.616608][ T5896] usb 9-1: device descriptor read/8, error -71 [ 1396.866962][ T5896] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1396.911431][ T5896] usb 9-1: device descriptor read/8, error -71 [ 1397.028993][ T5896] usb usb9-port1: unable to enumerate USB device [ 1397.033012][T16845] binder: 16844:16845 ioctl c0306201 2000000003c0 returned -14 [ 1397.055550][T16847] ./file0: Can't lookup blockdev [ 1397.197825][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10434'. [ 1398.114924][T16896] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1398.193994][T16896] UDF-fs: Scanning with blocksize 4096 failed [ 1398.503527][ T30] audit: type=1800 audit(1750603736.816:198): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.10443" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1398.606981][T16911] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10443'. [ 1398.623821][T16910] /dev/rnullb0: Can't open blockdev [ 1398.718338][T16924] Bluetooth: MGMT ver 1.23 [ 1398.923534][T16941] /dev/rnullb0: Can't open blockdev [ 1399.445624][T16963] /dev/rnullb0: Can't open blockdev [ 1399.467320][T16963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.486150][T16963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.676009][ T5896] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1399.835952][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1400.095852][ T5896] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1400.256031][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1400.391366][ T5896] usb usb9-port1: attempt power cycle [ 1400.756634][ T5896] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1400.815884][ T5896] usb 9-1: device descriptor read/8, error -71 [ 1401.056113][ T5896] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1401.087033][ T5896] usb 9-1: device descriptor read/8, error -71 [ 1401.203484][ T5896] usb usb9-port1: unable to enumerate USB device [ 1409.818999][T17361] Bluetooth: hci0: command 0x0406 tx timeout [ 1423.115526][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.121967][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.155003][T18000] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 1423.181594][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10461'. [ 1423.360732][T18019] qnx4: no qnx4 filesystem (no root dir). [ 1423.711545][T18050] hfs: can't find a HFS filesystem on dev rnullb0 [ 1423.925712][ T397] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1424.085821][ T397] usb 10-1: Using ep0 maxpacket: 8 [ 1424.095304][ T397] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1424.119472][ T397] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1424.139518][ T397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.161852][ T397] usb 10-1: Product: syz [ 1424.175849][ T397] usb 10-1: Manufacturer: ч [ 1424.185342][ T397] usb 10-1: SerialNumber: syz [ 1424.409894][ T397] cdc_ncm 10-1:1.0: bind() failure [ 1424.471426][ T397] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1424.485326][ T397] cdc_ncm 10-1:1.1: bind() failure [ 1424.507468][ T397] usb 10-1: USB disconnect, device number 51 [ 1425.458325][T18132] syzkaller1: entered promiscuous mode [ 1425.464064][T18132] syzkaller1: entered allmulticast mode [ 1425.586255][ T9] usb 9-1: new low-speed USB device number 79 using dummy_hcd [ 1425.705774][ T3123] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1425.745775][ T9] usb 9-1: Invalid ep0 maxpacket: 16 [ 1425.876132][ T9] usb 9-1: new low-speed USB device number 80 using dummy_hcd [ 1425.882885][ T3123] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.899468][ T3123] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1425.923150][ T3123] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1425.935484][ T3123] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1425.952025][ T3123] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1425.974941][ T3123] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1425.985797][ T3123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1425.994001][ T3123] usb 10-1: Product: syz [ 1425.998774][ T3123] usb 10-1: Manufacturer: syz [ 1426.004380][ T3123] usb 10-1: SerialNumber: syz [ 1426.016788][ T3123] usb 10-1: config 0 descriptor?? [ 1426.045903][ T9] usb 9-1: Invalid ep0 maxpacket: 16 [ 1426.051660][ T9] usb usb9-port1: attempt power cycle [ 1426.224927][ T3123] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1426.234222][ T3123] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1426.308200][T18168] vxfs: WRONG superblock magic 00000000 at 1 [ 1426.316274][T18168] vxfs: WRONG superblock magic 00000000 at 8 [ 1426.322347][T18168] vxfs: can't find superblock. [ 1426.396961][ T9] usb 9-1: new low-speed USB device number 81 using dummy_hcd [ 1426.425834][ T3123] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 1426.436284][ T9] usb 9-1: Invalid ep0 maxpacket: 16 [ 1426.442491][ T3123] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1426.456200][ T3123] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1426.568678][ T9] usb 9-1: new low-speed USB device number 82 using dummy_hcd [ 1426.596745][ T9] usb 9-1: Invalid ep0 maxpacket: 16 [ 1426.602658][ T9] usb usb9-port1: unable to enumerate USB device [ 1426.632583][ T3123] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 1427.653568][T18132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.671646][T18132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.683314][ T3123] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1427.700555][ T3123] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 1427.730221][ T3123] usb 10-1: USB disconnect, device number 52 [ 1429.798204][T18311] qnx4: no qnx4 filesystem (no root dir). [ 1429.872544][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10489'. [ 1430.131919][T18326] XFS (rnullb0): Invalid superblock magic number [ 1430.388618][ T5831] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1430.490005][T18349] netlink: 348 bytes leftover after parsing attributes in process `syz.9.10497'. [ 1430.594733][ T5831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.635782][ T5831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.646103][ T5831] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1430.655161][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.678858][ T5831] usb 9-1: config 0 descriptor?? [ 1431.116040][ T5831] holtek_kbd 0003:04D9:A055.0033: item fetching failed at offset 0/3 [ 1431.136452][ T5831] holtek_kbd 0003:04D9:A055.0033: probe with driver holtek_kbd failed with error -22 [ 1431.299875][T18333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.313358][T18333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.530903][T18333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.555498][T18333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.656646][ T5831] usb 9-1: USB disconnect, device number 83 [ 1432.803506][T18450] /dev/rnullb0: Can't open blockdev [ 1434.795449][T18522] FAT-fs (rnullb0): bogus number of reserved sectors [ 1434.814089][T18522] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1435.661609][T18552] FAT-fs (rnullb0): bogus number of reserved sectors [ 1435.710882][T18552] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1436.592643][T18611] /dev/rnullb0: Can't open blockdev [ 1436.756229][ T43] IPVS: starting estimator thread 0... [ 1436.866062][T18620] IPVS: using max 29 ests per chain, 69600 per kthread [ 1437.053240][T18635] /dev/sg0: Can't lookup blockdev [ 1437.458820][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10548'. [ 1437.606278][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10549'. [ 1437.816788][ T5869] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1437.975838][ T43] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1437.998331][ T5869] usb 10-1: config 6 has an invalid interface number: 115 but max is 1 [ 1438.007538][ T5869] usb 10-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 1438.018637][ T5869] usb 10-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1438.033483][ T5869] usb 10-1: config 6 has no interface number 0 [ 1438.040758][ T5869] usb 10-1: config 6 interface 115 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1438.059255][ T5869] usb 10-1: config 6 interface 115 has no altsetting 0 [ 1438.069912][ T5869] usb 10-1: New USB device found, idVendor=154b, idProduct=f00d, bcdDevice=65.1e [ 1438.093644][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.102503][ T5869] usb 10-1: Product: ఄ [ 1438.115530][ T5869] usb 10-1: Manufacturer: ＼鑲Ⳕ幁箃椶ࢲ唑䈖ϙ勇ꯜ簈蠗哬ʋↁ䏧‚㙒鿑챱̈́榉潸橏虳卹뉹㷵義띞㪏폈ꩪ脇㸦ຶ锣鬨檹梤㠪䎋虈櫄眓砲턆ޜ徍饫浘䐪Ⲍ厁揄䨔ᥦ掜ࡠş鸘깈袏৐㼿⫗ﻐ뻄扟죗珪㱥暵◅뾖඘딌ꂘ⃒蕻슣잔ړ [ 1438.175629][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 1438.187560][ T5869] usb 10-1: SerialNumber: 䀁 [ 1438.194584][ T43] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1438.208220][ T43] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1438.228436][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.237469][ T43] usb 9-1: Product: syz [ 1438.241921][ T43] usb 9-1: Manufacturer: syz [ 1438.246672][ T43] usb 9-1: SerialNumber: syz [ 1438.272519][ T43] usb 9-1: config 0 descriptor?? [ 1438.442457][T18651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.483288][T18651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.529584][T18699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.562790][T18699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.718522][ T43] gs_usb 9-1:0.0: Configuring for 14 interfaces [ 1438.724848][ T43] gs_usb 9-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1438.735616][ T43] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -22 [ 1438.817859][ T5869] usb-storage 10-1:6.115: USB Mass Storage device detected [ 1438.872302][ T5869] usb-storage 10-1:6.115: Quirks match for vid 154b pid f00d: 2000000 [ 1438.945177][ T5869] usb 10-1: USB disconnect, device number 53 [ 1438.946067][T25574] usb 9-1: USB disconnect, device number 84 [ 1439.002252][T18740] delete_channel: no stack [ 1439.022405][T18740] delete_channel: no stack [ 1439.041098][T18732] Bluetooth: MGMT ver 1.23 [ 1439.171285][T18749] tmpfs: Bad value for 'mpol' [ 1439.228774][T18749] qnx4: no qnx4 filesystem (no root dir). [ 1440.165749][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10571'. [ 1440.670238][T18849] sit0: entered promiscuous mode [ 1440.705785][T18849] netlink: 'syz.6.10578': attribute type 1 has an invalid length. [ 1440.763145][T18849] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10578'. [ 1441.105785][ T5869] IPVS: starting estimator thread 0... [ 1441.305827][T18876] IPVS: using max 36 ests per chain, 86400 per kthread [ 1441.865657][ T9] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1441.894414][T18901] hfs: can't find a HFS filesystem on dev rnullb0 [ 1442.036368][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1442.048629][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1442.065959][ T9] usb 9-1: config 0 has no interface number 0 [ 1442.085703][ T9] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1442.102379][ T9] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1442.112741][ T9] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1442.113599][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10586'. [ 1442.131279][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.131308][ T9] usb 9-1: Product: syz [ 1442.131323][ T9] usb 9-1: Manufacturer: syz [ 1442.131339][ T9] usb 9-1: SerialNumber: syz [ 1442.160349][ T9] usb 9-1: config 0 descriptor?? [ 1442.400826][ T9] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1442.419756][ T9] cx231xx 9-1:0.1: Failed to read PCB config [ 1442.426074][ T9] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71 [ 1442.447589][ T9] usb 9-1: USB disconnect, device number 85 [ 1442.925749][ T9] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1443.085816][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1443.095459][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1443.110325][ T9] usb 9-1: config 0 has no interface number 0 [ 1443.121561][ T9] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1443.152933][ T9] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1443.174170][ T9] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1443.192068][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.203216][ T9] usb 9-1: Product: syz [ 1443.208659][ T9] usb 9-1: Manufacturer: syz [ 1443.213396][ T9] usb 9-1: SerialNumber: syz [ 1443.232532][ T9] usb 9-1: config 0 descriptor?? [ 1443.398935][T18972] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1443.416106][T18972] Error validating options; rc = [-22] [ 1443.457788][ T9] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1443.489185][ T9] cx231xx 9-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1443.618850][ T9] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1443.638292][ T9] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1443.662167][ T9] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1443.686578][ T9] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1443.696167][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10584'. [ 1443.707864][ T9] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1443.735846][ T9] cx231xx 9-1:0.1: Failed to set devmode to analog: error: -32 [ 1443.831679][ T9] i2c i2c-3: Added multiplexed i2c bus 5 [ 1444.157227][ T9] i2c i2c-3: Added multiplexed i2c bus 6 [ 1444.163450][ T9] cx231xx 9-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 1444.172569][ T9] cx231xx 9-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 1444.288231][ T9] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -32 [ 1444.710079][ T5831] usb 9-1: USB disconnect, device number 86 [ 1445.685200][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10606'. [ 1445.775757][ T5831] usb 9-1: new full-speed USB device number 87 using dummy_hcd [ 1445.946485][ T5831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.966089][ T5831] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1445.997661][ T5831] usb 9-1: New USB device found, idVendor=045e, idProduct=0750, bcdDevice= 0.00 [ 1446.016185][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.037121][ T5831] usb 9-1: config 0 descriptor?? [ 1446.463589][T19121] sctp: [Deprecated]: syz.9.10609 (pid 19121) Use of int in maxseg socket option. [ 1446.463589][T19121] Use struct sctp_assoc_value instead [ 1446.480485][ T5831] microsoft 0003:045E:0750.0034: unknown main item tag 0x6 [ 1446.496799][ T5831] microsoft 0003:045E:0750.0034: hidraw0: USB HID vff.fa Device [HID 045e:0750] on usb-dummy_hcd.8-1/input0 [ 1446.515627][ T5831] microsoft 0003:045E:0750.0034: no inputs found [ 1446.522881][ T5831] microsoft 0003:045E:0750.0034: could not initialize ff, continuing anyway [ 1446.675967][T19079] netlink: 'syz.8.10604': attribute type 291 has an invalid length. [ 1446.704346][T19079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.716110][T19079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.743756][ T24] usb 9-1: USB disconnect, device number 87 [ 1446.815843][T19162] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10611'. [ 1446.828150][T19148] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10611'. [ 1446.837905][T19162] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10611'. [ 1446.852858][T19148] NILFS (rnullb0): couldn't find nilfs on the device [ 1447.151456][T19179] XFS (rnullb0): Invalid superblock magic number [ 1447.713246][ T10] usb 9-1: new full-speed USB device number 88 using dummy_hcd [ 1447.875953][ T10] usb 9-1: device descriptor read/64, error -71 [ 1448.117186][ T10] usb 9-1: new full-speed USB device number 89 using dummy_hcd [ 1448.286022][ T10] usb 9-1: device descriptor read/64, error -71 [ 1448.325733][ T397] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1448.416055][ T10] usb usb9-port1: attempt power cycle [ 1448.503790][ T397] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1448.533265][ T397] usb 10-1: config 0 has no interface number 0 [ 1448.548665][ T397] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1448.580273][ T397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.619933][ T397] usb 10-1: config 0 descriptor?? [ 1448.650146][ T397] cp210x 10-1:0.1: cp210x converter detected [ 1448.772057][ T10] usb 9-1: new full-speed USB device number 90 using dummy_hcd [ 1448.845818][ T10] usb 9-1: device descriptor read/8, error -71 [ 1449.064301][ T397] cp210x 10-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 1449.106236][ T10] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 1449.144725][ T10] usb 9-1: device descriptor read/8, error -71 [ 1449.266147][ T10] usb usb9-port1: unable to enumerate USB device [ 1449.276580][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10620'. [ 1449.304224][ T397] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1449.853097][ T24] usb 10-1: USB disconnect, device number 55 [ 1449.892986][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1449.945449][ T24] cp210x 10-1:0.1: device disconnected [ 1450.011569][T19301] /dev/sg0: Can't lookup blockdev [ 1450.075986][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10627'. [ 1450.245073][T19310] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1450.257704][T19313] netlink: 'syz.0.10628': attribute type 3 has an invalid length. [ 1450.274083][T19313] netlink: 766 bytes leftover after parsing attributes in process `syz.0.10628'. [ 1450.340051][ C0] [ 1450.342423][ C0] ============================= [ 1450.347278][ C0] [ BUG: Invalid wait context ] [ 1450.352142][ C0] 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 Not tainted [ 1450.359257][ C0] ----------------------------- [ 1450.364115][ C0] kworker/u8:16/9956 is trying to lock: [ 1450.369669][ C0] ffffc900054ea410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1450.379224][ C0] other info that might help us debug this: [ 1450.385123][ C0] context-{2:2} [ 1450.388592][ C0] 5 locks held by kworker/u8:16/9956: [ 1450.393977][ C0] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1450.405688][ C0] #1: ffffc90005577bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1450.420427][ C0] #2: ffff88807a336250 (&devlink->lock_key#30){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb80 [ 1450.431442][ C0] #3: ffff8880647f08e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1a9/0xb80 [ 1450.442975][ C0] #4: ffffc900054ea960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 1450.452933][ C0] stack backtrace: [ 1450.456754][ C0] CPU: 0 UID: 0 PID: 9956 Comm: kworker/u8:16 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1450.456780][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1450.456793][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1450.456824][ C0] Call Trace: [ 1450.456832][ C0] [ 1450.456839][ C0] dump_stack_lvl+0x189/0x250 [ 1450.456864][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1450.456885][ C0] ? __pfx__printk+0x10/0x10 [ 1450.456906][ C0] ? print_lock_name+0xde/0x100 [ 1450.456927][ C0] __lock_acquire+0xbcb/0xd20 [ 1450.456949][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1450.456967][ C0] lock_acquire+0x120/0x360 [ 1450.456984][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1450.457006][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 1450.457032][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1450.457047][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1450.457069][ C0] ? xa_load+0x1ea/0x210 [ 1450.457088][ C0] kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1450.457106][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1450.457132][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1450.457157][ C0] ? kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 1450.457176][ C0] xen_timer_callback+0x109/0x220 [ 1450.457196][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 1450.457214][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 1450.457240][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1450.457261][ C0] ? read_tsc+0x9/0x20 [ 1450.457292][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1450.457323][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1450.457356][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1450.457382][ C0] [ 1450.457389][ C0] [ 1450.457394][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1450.457414][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x82/0x130 [ 1450.457441][ C0] Code: 00 00 b9 01 00 00 00 48 85 c0 0f 84 b4 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 40 c0 92 45 31 c9 eb 08 <49> ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 99 9d ff 10 41 [ 1450.457457][ C0] RSP: 0018:ffffc90005577918 EFLAGS: 00000293 [ 1450.457475][ C0] RAX: 0000000000000003 RBX: 00000000c6336400 RCX: 0000000000000001 [ 1450.457488][ C0] RDX: ffffffff895d2f5c RSI: ffffffff8f7249f0 RDI: 0000000000000031 [ 1450.457503][ C0] RBP: 0000000000000031 R08: ffff88807c015a00 R09: 0000000000000000 [ 1450.457516][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000031 [ 1450.457527][ C0] R13: 0000000000000000 R14: ffffffff8c3363ec R15: ffffffff8c3363ec [ 1450.457544][ C0] ? in_aton+0x33c/0x440 [ 1450.457570][ C0] in_aton+0x33c/0x440 [ 1450.457591][ C0] nsim_dev_trap_report_work+0x50d/0xb80 [ 1450.457622][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1450.457643][ C0] process_scheduled_works+0xae1/0x17b0 [ 1450.457675][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1450.457701][ C0] worker_thread+0x8a0/0xda0 [ 1450.457730][ C0] kthread+0x70e/0x8a0 [ 1450.457756][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1450.457777][ C0] ? __pfx_kthread+0x10/0x10 [ 1450.457801][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1450.457826][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1450.457852][ C0] ? __pfx_kthread+0x10/0x10 [ 1450.457876][ C0] ret_from_fork+0x3f9/0x770 [ 1450.457896][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1450.457916][ C0] ? __switch_to_asm+0x39/0x70 [ 1450.457939][ C0] ? __switch_to_asm+0x33/0x70 [ 1450.457962][ C0] ? __pfx_kthread+0x10/0x10 [ 1450.457988][ C0] ret_from_fork_asm+0x1a/0x30 [ 1450.458017][ C0] [ 1450.458041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.803467][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.809463][ C0] hrtimer: interrupt took 469449849 ns [ 1450.909520][ C0] vkms_vblank_simulate: vblank timer overrun